# SCA Risks
## SCA Statistics
The **Open Source** **Risks (SCA)** can be accesed by selecting the SCA option under the [**Risks**](https://docs.xygeni.io/xygeni-products/application-security-posture-management-aspm/all-risks) tab . This tab provides a comprehensive view of all the security issues of the dependencies.
{% hint style="info" %}
You can reach the Open Source **SCA statistics** either by selecting Risk selecting the top-right statistics tab of the SCA page.
{% endhint %}
### Statistics
Secrets' **Statistics** view shows:
* Charts for # of issues by severity, by type and by type & severity
* A table with the issues (as well as a filter for the table)
You can use filters to select specific issues:
* By Funnel Phase (see [Prioritization Funnels](https://docs.xygeni.io/introduction-to-xygeni/prioritization-funnels) )
* By Severity
* By Issue type
* By Dependency type (direct or indirect)
* By Reachability (see [reachability](https://docs.xygeni.io/introduction-to-xygeni/prioritization-funnels/prioritization-funnels-1/reachability))
* By Fixability (see [fixability](https://docs.xygeni.io/xygeni-products/open-source-security-oss/oss-auto-remediation))
* By Project (pattern)
* By Issue status (open, confirmed, muted, etc)
* By Tag
### Public Vulnerabilities (CVEs)
Clicking on the icon of a component with public **vulnerabilities** will open a **slide** with detailed information about the CVE.
{% hint style="info" %}
Vulnerabilities also show information about **Fixability**. Please see [Fixability ](https://docs.xygeni.io/xygeni-products/open-source-security-oss/oss-auto-remediation)for further details.
{% endhint %}
The **Reachability Analysis tab** provides detailed information on the call paths leading to the component's vulnerable method(s).
{% hint style="info" %}
Please visit the [Reachability](https://docs.xygeni.io/introduction-to-xygeni/prioritization-funnels/prioritization-funnels-1/reachability) documentation for further information.
{% endhint %}
### Malware Early Warny details (MEW)
Clicking on the icon of a component with **malware detected by Xygeni** will open a **slide** with details.
The **Summary tab** shows detailed information about the component:
* Explanation
* Component name
* Location where defined
* Description
The **Malware Evidence** tab provides detailed information about the detected code evidence.
icon of a component with public **vulnerabilities** will open a **slide** with detailed information about the CVE.
