Quick Answer: An attack path is a sequence of vulnerabilities, misconfigurations, and attacker actions that chain together from an initial external entry point to a meaningful end impact. Where individual vulnerabilities represent isolated risks, an attack path shows how an attacker combines multiple findings to achieve something they could not accomplish with any single finding alone — a data breach, account takeover, or system compromise.
What makes up an attack path?
A complete attack path has:
- Initial access vector — the first external entry point: an open service, an exposed credential, a subdomain takeover vulnerability
- Intermediate steps — subsequent vulnerabilities or misconfigurations that allow the attacker to advance: moving from a subdomain to a trusted application, intercepting tokens, escalating privileges
- End impact — the outcome of the chain: customer data exposed, administrative access gained, ransomware deployed, financial transaction authorised
How does an attack path differ from a single vulnerability?
A single vulnerability at Medium severity is concerning but may not require immediate action. The same Medium vulnerability, as the first step in an attack path ending in Critical data exposure, demands immediate remediation — even though its CVSS score did not change.
Attack paths reveal the combined risk that individual CVSS scores hide. This is why VeilScan includes attack path analysis alongside individual finding severity: the path tells you what an attacker can actually do with your findings, not just how severe each one is in isolation.
What is the difference between an attack path and an attack vector?
An attack vector (in CVSS terminology) refers to the context from which a vulnerability is exploitable: Network (remote), Adjacent (local network), Local (physical/logged-in access), or Physical (physical presence). An attack path is a multi-step chain of findings — broader than a single CVSS attack vector.
What are common questions about Attack Path?
What does Attack Path mean in cybersecurity?
Attack Path describes a security concept that affects how teams understand, monitor, and reduce external exposure across internet-facing assets.
Why does Attack Path matter for external attack surface monitoring?
It matters because attackers continuously inspect public assets. Tracking this concept helps teams reduce exploitable exposure before it becomes a breach path.
How does VeilScan help with Attack Path?
VeilScan discovers public assets, validates findings with proof, prioritises issues by business impact, and explains remediation in reports built for engineering and leadership.
What related terms should you read next?
See how your findings chain into attack paths.
Paid plans include attack path analysis in every scan report.
View plans →
·
Back to glossary