The automated vulnerability scanning tool is used to scan a group of hosts or a network for known vulnerable services (., system allows anonymous File Transfer Protocol [FTP], sendmail relaying). However, it should be noted that some of the potential vulnerabilities identified by the automated scanning tool may not represent real vulnerabilities in the context of the system environment. For example, some of these scanning tools rate potential vulnerabilities without considering the site’s environment and requirements. Some of the “vulnerabilities” flagged by the automated scanning software may actually not be vulnerable for a particular site but may be configured that.
