Network vulnerability scanner with NMAP and automated CVE reporting

Network Vulnerability Scanner (used NMAP as engine) with Automated CVE Report

Workflow Overview

This n8n workflow provides comprehensive network vulnerability scanning with automated CVE enrichment and professional report generation. It performs Nmap scans, queries the National Vulnerability Database (NVD) for CVE information, generates detailed HTML/PDF reports, and distributes them via Telegram and email.

Key Features

- Automated Network Scanning: Full Nmap service and version detection scan - CVE Enrichment: Automatic vulnerability lookup using NVD API - CVSS Scoring: Vulnerability severity assessment with CVSS v3.1/v3.0 scores - Professional Reporting: HTML reports with detailed findings and recommendations - PDF Generation: Password-protected PDF reports using Prince XML - Multi-Channel Distribution: Telegram and email delivery - Multiple Triggers: Webhook API, web form, manual execution, scheduled scans - Rate Limiting: Respects NVD API rate limits - Comprehensive Data: Service detection, CPE matching, CVE details with references

Use Cases

- Regular security audits of network infrastructure - Compliance scanning for vulnerability management - Penetration testing reconnaissance phase - Asset inventory with vulnerability context - Continuous security monitoring - Vulnerability assessment reporting for management - DevSecOps integration for infrastructure testing

---