IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Vulnerability Management: How are Vulnerabilities detected and scored?

Vulnerability Management: How are Vulnerabilities detected and scored?

Environment

  • Carbon Black Cloud Console

Question

How are Vulnerabilities detected and scored? 

Answer

OSQuery results are used is used compared to CVE information from National Vulnerability Database (NVD) to find issues

Additional Notes

The Risk Score is calculated using the gathered results, please refer to Risk Evaluation for more information on this. If the information for the vulnerability from the NVD show it is fixed in a specific version the Vulnerability will show even if a fix is applied through other means. Only the noted resolutions from those Sources will resolve the Vulnerability. 


 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-25-2022
Views:
746