You can analyze the list of vulnerabilities (CVEs) provided by CISA which it considers critical and take appropriate measures to mitigate them.
For more information, see the list of known vulnerabilities by CISA.
For details about product features, usage, and best practices, click ? or Help.
Log on to Trellix Insights.
Click
and select CVEs. The list of CVEs that requires attention are displayed under the CVEs Requiring Attention tab. Navigate to the CVEs prioritized by CISA tab.(optional) Filter (
) CVEs by CVE Published Year, Vendor name, Product name, Severity, and Resolution status.Note
You can also view the CVEs for specific vendors and their products by creating CVE preferences.
(optional) Sort the CVE list by Number of Associated Campaigns, CVSS score, and Published Date.
Select the CVE and view the following details:
Option
Description
CVE ID
Unique ID assigned to a vulnerability.
CVE Published Date
The date when the CVE was published.
Description
A brief description of the CVE.
Vendor Name
The name of the vendor whose product is affected by this CVE vulnerability.
Product Name
The name of the product affected by this CVE vulnerability.
CVSS score
A score that represents the severity of the vulnerability. CVSS scores are based on three categories: Base score, Temporal score, and Environmental score.
CVSS vector
A string value to determine the vulnerability metrics. The CVSS score is mapped to the CVSS vector.
Impact
The potential damage to the system if this vulnerability is exploited.
CWE ID
Describes the nature of software weakness that results to security vulnerabilities. For more information, see the CWE categories list.
Exploited in the wild
Indicates whether this vulnerability is known to and actively used by threat actors.
Patch available
Indicate whether the patch is available for this vulnerability.
POC link
The proof of concept to determine whether your environment is vulnerable.
Required Action
The recommended action you must take to resolve this vulnerability.
Action Due
The due date to resolve this vulnerability.
Detection Strategy
Describes a set of measures and processes to detect and respond to the vulnerability.
Remediation
A brief description (or steps) to remediate the vulnerability.
Associated Campaigns
List of campaigns associated with this CVE.
Detected Campaigns
List of campaigns detected in your environment for this CVE.
References
External link to sites that provide more information about the CVE.
Click Mark as complete. This improves the overall security posture score.