Ever wonder why the list of Assets Affected in a Top Fix looks to be less assets than just viewing the fix in the Fixes tab?
The job of Top Fixes is to find places where asset scores will drop when a particular fix is applied. The list of assets in the Assets Affected tab in Top Fixes represents the assets where the fix suggested would remediate the HIGHEST rated CVEs on the asset. When that fix is applied, those assets would see a score drop and therefore an impact to the overall risk meter would be seen.
When you click the link for a specific CVE in the CVEs Addressed tab within Top Fixes, you will get a view of ALL of the assets within that group that need the fix; regardless of score impact post remediation.