| 1.1.2.1 console authentication | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL |
| 1.1.2.2 vty line authentication | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL |
| 1.3 O19C-00-000300 | CIS Oracle Database 19c STIG v1.1.0 CAT II OracleDB | OracleDB | ACCESS CONTROL |
| 3.1.2.3 BGP TTL Security | CIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations | ArubaOS | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.3.1.3 PIM SSM | CIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations | ArubaOS | ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, MEDIA PROTECTION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.3.2.1 Ensure net.ipv6.conf.all.forwarding is configured | CIS Oracle Linux 10 v1.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.1 Ensure net.ipv6.conf.all.forwarding is configured | CIS Red Hat Enterprise Linux 10 v1.0.1 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.2 Ensure net.ipv6.conf.default.forwarding is configured | CIS Debian Linux 12 v2.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.2 Ensure net.ipv6.conf.default.forwarding is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.2 Ensure net.ipv6.conf.default.forwarding is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.2 Ensure net.ipv6.conf.default.forwarding is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 3.3.2.2 Ensure net.ipv6.conf.default.forwarding is configured | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 3.3.6 MSDP SA Cache limit | CIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations | ArubaOS | ACCESS CONTROL, RISK ASSESSMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY |
| AADC-CL-000280 - Adobe Acrobat Pro DC Classic access to unknown websites must be restricted. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| ALMA-09-019160 - AlmaLinux OS 9 must not enable IP packet forwarding unless the system is a router. | DISA Cloud Linux AlmaLinux OS 9 STIG v1r7 | Unix | CONFIGURATION MANAGEMENT |
| CASA-FW-000170 - The Cisco ASA perimeter firewall must be configured to filter traffic destined to the enclave in accordance with the specific traffic that is approved and registered in the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and vulnerability assessments - Interface | DISA STIG Cisco ASA FW v2r1 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CIS_Apple_macOS_14_Sonoma_STIG_v1.0.0_CAT_I.audit from CIS Apple macOS 14 Sonoma STIG v1.0.0 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT I | Unix | |
| CIS_Apple_macOS_14_Sonoma_STIG_v1.0.0_CAT_III.audit from CIS Apple macOS 14 Sonoma STIG v1.0.0 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT III | Unix | |
| CIS_Apple_macOS_15_Sequoia_STIG_v1.0.0_CAT_I.audit from CIS Apple macOS 15 Sequoia STIG v1.0.0 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT I | Unix | |
| CIS_Apple_macOS_15_Sequoia_STIG_v1.0.0_CAT_II.audit from CIS Apple macOS 15 Sequoia STIG v1.0.0 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | |
| CIS_Apple_macOS_15_Sequoia_STIG_v1.0.0_CAT_III.audit from CIS Apple macOS 15 Sequoia STIG v1.0.0 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT III | Unix | |
| CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_I.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT I | Unix | |
| CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_III.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT III | Unix | |
| CIS_IBM_WebSphere_Liberty_Server_STIG_v1.0.0_CAT_I.audit from CIS IBM WebSphere Liberty Server STIG v1.0.0 | CIS IBM WebSphere Liberty Server STIG v1.0.0 CAT I | Unix | |
| CIS_Microsoft_IIS_10.0_Site_STIG_v1.0.0_CAT_I.audit from CIS Microsoft IIS 10.0 Site STIG v1.0.0 | CIS Microsoft IIS 10.0 Site STIG v1.0.0 CAT I | Windows | |
| CIS_Microsoft_Office_365_ProPlus_STIG_v1.1.0_CAT_II.audit from CIS Microsoft Office 365 ProPlus STIG v1.1.0 | CIS Microsoft Office 365 ProPlus STIG v1.1.0 CAT II | Windows | |
| CIS_Microsoft_Office_System_2016_STIG_v1.0.0_CAT_II.audit from CIS Microsoft Office System 2016 STIG v1.0.0 | CIS Microsoft Office System 2016 STIG v1.0.0 CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_I.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | |
| CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_III.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT III | Windows | |
| CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0 | CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT III | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_I.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT I | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_DC_CAT_III.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT III | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_DC_CAT_I.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_DC_CAT_III.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT III | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_MS_CAT_I.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT I | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II | Windows | |
| CIS_Ubuntu_Linux_22.04_LTS_STIG_v1.0.0_CAT_II.audit from CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 | CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II | Unix | |
| CIS_Ubuntu_Linux_24.04_LTS_STIG_v1.0.0_CAT_II.audit from CIS Ubuntu Linux 24.04 LTS STIG v1.0.0 | CIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II | Unix | |
| CIS_VMware_vSphere_8.0_ESXi_STIG_v1.0.0_CAT_I_Unix.audit from CIS VMware vSphere 8.0 ESXi STIG v1.0.0 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT I Unix | Unix | |
| CIS_VMware_vSphere_8.0_ESXi_STIG_v1.0.0_CAT_II_Unix.audit from CIS VMware vSphere 8.0 ESXi STIG v1.0.0 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II Unix | Unix | |
| CISC-RT-000395 - The Cisco perimeter switch must be configured to drop IPv6 packets containing a Destination Option header with invalid option type values. | DISA Cisco IOS XE Switch RTR STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-RT-000395 - The Cisco perimeter switch must be configured to drop IPv6 packets containing a Destination Option header with invalid option type values. | DISA Cisco IOS Switch RTR STIG v3r3 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-RT-000396 - The Cisco perimeter switch must be configured to drop IPv6 packets containing an extension header with the Endpoint Identification option. | DISA Cisco IOS Switch RTR STIG v3r3 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-RT-000397 - The Cisco perimeter switch must be configured to drop IPv6 packets containing the NSAP address option within Destination Option header. | DISA Cisco IOS XE Switch RTR STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| DISA_STIG_JRE_8_Unix_v1r3.audit for Oracle JRE 8 UNIX STIG, v1r3 | DISA STIG Oracle JRE 8 Unix v1r3 | Unix | |
| O19C-00-000300 - Oracle Database must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect. | DISA Oracle Database 19c STIG v1r5 OracleDB | OracleDB | ACCESS CONTROL |
| PPS9-00-004820 - When using command-line tools such as psql, users must use a logon method that does not expose the password. | EDB PostgreSQL Advanced Server DB Audit v2r3 | PostgreSQLDB | IDENTIFICATION AND AUTHENTICATION |