You can view the list of CVEs that Trellix Advanced Research Center has prioritized and considers to be critical.
For details about product features, usage, and best practices, click ? or Help.
Log on to Trellix Insights.
Click
and select CVEs. The list of CVEs that requires attention are displayed under the CVEs Requiring Attention tab. Navigate to the CVEs prioritized by Trellix ARC tab.(optional) Filter (
) CVEs by CVE Published Year, Vendor name, Product name, Resolution status, and Selection criteria. Available values for Selection criteria are:Disruptive: A vulnerability (CVE) that is particularly severe or critical and has a significant impact on your system or devices.
Publicity: A vulnerability that has been publicly disclosed and is known to potential attackers. This signifies that information about the vulnerability, such as the details of how to exploit it, is available to anyone without any restrictions.
Note
You can also view the CVEs for specific vendors and their products by creating CVE preferences.
(optional) Sort the CVE list by Number of Associated Campaigns, CVSS score, and Published Date.
Select the CVE and view the following details:
Option
Description
CVE ID
Unique ID assigned to a vulnerability.
CVE Published Date
The date when the CVE was published.
Description
A brief description of the CVE.
Vendor Name
The name of the vendor whose product is affected by this CVE vulnerability.
Product Name
The name of the product affected by this CVE vulnerability.
CVSS score
A score that represents the severity of the vulnerability. CVSS scores are based on three categories: Base score, Temporal score, and Environmental score.
CVSS vector
A string value to determine the vulnerability metrics. The CVSS score is mapped to the CVSS vector.
Impact
The potential damage to the system if this vulnerability is exploited.
CWE ID
Describes the nature of software weakness that results to security vulnerabilities. For more information, see the CWE categories list.
Exploited in the wild
Indicates whether this vulnerability is known to and actively used by threat actors.
Patch available
Indicate whether the patch is available for this vulnerability.
POC link
The proof of concept to determine whether your environment is vulnerable.
Detection Strategy
Describes a set of measures and processes to detect and respond to the vulnerability.
Remediation
A brief description (or steps) to remediate the vulnerability.
Associated Campaigns
List of campaigns associated with this CVE.
Detected Campaigns
List of campaigns detected in your environment for this CVE.
References
External link to sites that provide more information about the CVE.
Click Mark as complete. This improves the overall security posture score and the CVE is added to the list of CVEs for All Campaigns.