False Positive – SQL Vulnerability Findings Control Flagged Across Subscriptions

Hi Team,

The control “SQL databases should have vulnerability findings resolved” is currently being flagged across multiple subscriptions.

1. AIA Pricing Engine
2. AIA Pricing Engine - Prod

Upon validation, we confirmed the following:

• There are no active or outstanding vulnerability findings present in the affected SQL databases.
• The Defender/Advisor recommendation shows 0 unhealthy databases and no failed checks.
• The flagged state appears to be a false positive, likely due to a control evaluation or reporting lag/inconsistency.

Impact Assessment:

• No immediate security risk identified.
• All applicable SQL resources are compliant with the control requirement.