Manually creating issues for reports - Port Swigger
Summary: PortSwigger's documentation describes how Burp Suite users can manually create issues for vulnerabilities that Burp Scanner does not detect automatically, by selecting requests or responses in Proxy HTTP history, the site map, or the message editor and choosing Create an issue. The dialog captures a name, HTTP service, path, severity (high, medium, low, or information), confidence (tentative, firm, or certain), optional detail and remediation, and attaches the selected traffic as evidence, with additional evidence addable later via Record an issue > Add to manually created issue.
Key Takeaway: Manually created issues are saved to the project file and appear in the All issues panel alongside scanner-generated findings, so anything a tester records by hand carries the same weight in the final report as what the tool found on its own.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026