critical assets.sql

SELECT
  dv.title AS "Vulnerability Title",
  Htmltotext(dv.description) AS "Description",
  dv.cvss_score AS "CVSSv3 Score",
  dv.exploits AS "Exploit Count",
  dv.malware_kits AS "Malware Kit Count",
  da.host_name AS "Instances"
FROM
  dim_vulnerability dv
  JOIN fact_asset_vulnerability_instance favi USING(vulnerability_id)
  JOIN dim_asset da USING(asset_id)
WHERE
  dv.cvss_v3_attack_vector = 'N'
  AND dv.cvss_v3_user_interaction = 'N'
  AND dv.cvss_v3_privileges_required = 'N'
  AND dv.cvss_v3_confidentiality_impact = 'H'
  AND dv.cvss_v3_availability_impact = 'H'
  AND dv.cvss_v3_integrity_impact = 'H'
  AND (
    dv.exploits != 0
    OR dv.malware_kits != 0
  )