Glossary: Vulnerability Management and Monitoring

false positive

Also written: false positives, false alarm

A reported flaw that isn't really there, or an alert on normal activity. Examples are Nikto calling Python's simple server outdated, or a scanner flagging OpenSSH 9.6p1 that Ubuntu has already fixed.