07/22/2024: Enhancements to the Vulnerability Library

Alert Logic Managed Detection and Response customers now have access to enhancements to the Vulnerability Library in the Alert Logic console including:

• Vulnerability Instances count with links to Affected Assets
• Published Date and Detection columns
• CISA Known Exploit Vulnerability status
• Search Deeplink Support

In addition, the Vulnerability Library content is now refreshed every 12 hours. 

Read on to learn more about each enhancement.

Vulnerability Instances Counts with Links to Affected Assets

The Vulnerability Library is located in the Alert Logic console at >  Investigate > Vulnerability Library.  You can now access a link that provides immediate visibility into the count of open instances of the selected vulnerability in your environment.  

You can click the link to quickly access the list of affected assets in your environment on the Exposures details page.

Note: Multiple links will be presented if there are multiple vulnerability identifiers for the same exposure.

Published Date and Detected Columns

Columns for Published Date and Detected status have been added to provide additional context on the Vulnerability Library main page.  

The Published Date captures the date the vulnerability was published to the National Vulnerability Database (NVD).  The Detected status displays the icon if the vulnerability can be detected by Alert Logic scanning or assessment capabilities and the icon if it cannot be detected.

Note: You can now sort the main page by the Published Date in ascending or descending order.

CISA Known Exploits Vulnerability status

The CISA Known Exploited Vulnerabilities (KEV) catalog determines if a vulnerability has a known attempted or successful exploit available.  The CISA KEV status has been added to the details modal in the Vulnerability Library to provide visibility into vulnerabilities that have active exploitations.

Note: The CISA KEV column has been added to the Vulnerability Library main page.

Search Deeplink Support

The Vulnerability Library now supports deeplinks that enable you to bookmark and navigate directly to the details page for a specific CVE-ID or a list of vulnerabilities matching your search string.

Additional Resources

Learn more about Vulnerability Library content and details with the following documentation:

• Vulnerability Library
• NIST National Vulnerability Database
• CISA Known Exploited Vulnerabilities Catalog