- Carbon Black Cloud Console
How are Vulnerabilities detected and scored?
OSQuery results are used is used compared to CVE infromation from Kenna Security and National Vulnerability Database (NVD) to find issues
The Risk Score is calculated using the gathered results, please refer to Risk Evaluation
for more information on this. If the information for the vulnerability from the NVD and Kenna show it is fixed in a specific version the Vulnerability will show even if a fix is applied through other means. Only the noted resolutions from those Sources will resolve the Vulnerability.