The numbers in Symantec Endpoint Protection Manager (SEPM) Risk > Action List reports do not always add up to the same amount of detections.
There is more than one SEPM that the clients can loadbalance between.
Some Client Database elements referencing the SEPM are mismatched
Symantec is aware of this issue and is investigating.