Vulnerability Response Workspaces

Manually add the CIs in your organization that you think should be associated with the vulnerability assessment record but do not display in the affected CIs after initial assessment.

Manually assign priority and exposure level to the vulnerability assessment record.

Create assessment records for vulnerabilities of interest. After you create the assessment, you can initiate initial risk assessment, manually update the record, and calculate the risk score automatically.

You can link, propose or promote the assessment record to a Major Security Incident provided you have access to the Major Security Incident Management application.

Update the Vulnerability Assessment record, post it’s creation. Based on the field's values you can calculate the risk score.

After you’ve created the vulnerability assessment record and updated the risk attribute fields, run an assessment of the event record.

Update the vulnerability assessment auto-flush record.

Review the assessment results in the assessment tab. After you perform an assessment of the vulnerability event, the record is correlated against the data from Software Bill of Materials and Software Asset Management and displayed with visualisations.

Create vulnerable items (VIs) or application vulnerable items (AVITs) from the Vulnerability Assessment Workspace. Vulnerability analysts analyze the list of VIs and recommend solutions and patches that help the IT team to patch these vulnerabilities.

Review the following information before using the CVE Exposure Assessment REST API to trigger a CVE exposure assessment or create a vulnerability assessment record from an external system.

Overview of the assessment details display in the Overview tab. After you perform the initial assessment the record is correlated against the data from Software Bill of Materials and Software Asset Management and displayed with visualisations.

Vulnerability Response Workspaces offer a consolidated view of the features that enables you to multi-task from within the same pane by boosting productivity and saving time.

For delta processing of a CVE, you can activate it, thus adding it to the active list of CVEs.

Activate or deactivate software by a publisher to stop delta processing of the software and remove it from the active list of software.

To stop further delta processing of software, you can choose to deactivate it, thus removing it from the active list of software.

Add Common Vulnerabilities and Exposures (CVEs) to the exposure configuration list of CVEs in Exposure Assessment to assess the impact of a new vulnerability or zero-day vulnerability.

Add software by a publisher to the Exposure Assessment module to assess the impact of a new vulnerability or zero-day vulnerability.

Add a new software to the Exposure Assessment module to assess the impact of a new vulnerability or zero-day vulnerability.

Reference values used to calculate the confidence score.

Before you can use the workspaces, confirm you've completed the following setup tasks.

Create vulnerable items (VIs) from the Exposure Assessment page. Vulnerability event managers then analyze this list of VIs and recommend solutions and patches that help the IT team to patch these vulnerabilities.

Create vulnerable items (VIs) from the Exposure Assessment page to analyze the list of VIs and recommend solutions and patches that can help the IT team to patch the vulnerabilities.

Create vulnerable items (VIs) from the Exposure Assessment page. Vulnerability event managers then analyze this list of VIs and recommend solutions and patches that help the IT team to patch these vulnerabilities.

Example of calculating the confidence for a zero-day vulnerability based on its Common Vulnerabilities and Exposures (CVE) information.

You can track the impacted assets list for new software by exporting the configuration items (CIs) related to an exposure assessment record to an excel sheet. This sheet can be used to share the assets details and owners to create incidents with the known impacted assets for the zero-day vulnerabilities.

You can track the impacted assets list for new software by exporting the configuration items (CIs) related to an exposure assessment record to an excel sheet. This sheet can be used to share the assets details and owners to create incidents with the known impacted assets for the zero-day vulnerabilities.

You can track the impacted assets list for a new CVE by exporting the configuration items (CIs) related to an exposure assessment record to an excel sheet. This sheet can be used to share the assets details and owners to create incidents with the known impacted assets for the zero-day vulnerabilities.

Exposure assessment uses Common Vulnerabilities and Exposures (CVEs) to assess the exposure of your assets using the software discovery model. You can use the exposure assessment by CVE to identify exposure to potential vulnerabilities.

Exposure assessment for zero-day vulnerabilities, when Common Vulnerabilities and Exposures (CVEs) for the asset or configuration item is not available. It uses the software information to assess exposure, using the software discovery model.

Exposure assessment uses the Common Platform Enumeration (CPE) framework, which is a part of the Common Vulnerabilities and Exposures (CVEs) system, to evaluate the vulnerability exposure of your assets to vulnerability software. This assessment is performed using a software discovery model.

Assess exposure for zero-day vulnerabilities, when Common Vulnerabilities and Exposures (CVEs) for the asset or configuration item is unavailable. It uses the software information to assess exposure, using the software discovery model.

Remediation tasks bundle records (VITs, AVITs, CVITs or CTRs) in the Vulnerability Response Workspaces.

You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response.

View the details of the vulnerable software, in this case, Google Chrome. It is matched against the discovery model and the Common Platform Enumeration (CPE). This CPE version impacts all the Google Chrome versions.

The Vulnerability Assessment Workspace is designed for the Vulnerability event manager to perform exposure assessment, and proactively manage critical vulnerability events especially during the critical vulnerability events such as a zero-day event.

The Vulnerability Assessment Workspace is designed for the Vulnerability Event Manager to create a vulnerability event and to perform vulnerability assessment, especially during the zero-day vulnerability analysis.

The Vulnerability Manager and IT Remediation Workspaces support Vulnerability Response, Application Vulnerability Response, Container Vulnerability Response, and Configuration Compliance.