[ Applies to ] StorageGuard 9.2 and later / All supported storage, backup, SAN and cloud systems / Windows and Linux deployments
Vulnerability findings come from a different source than configuration findings. StorageGuard's knowledge base tracks the security advisories, alerts and CVEs that vendors publish for storage and backup systems, and each analysis checks which of them apply to the software and firmware versions you run. The Vulnerabilities overview shows what applies, how severe it is, and what was published recently.
In this article
Before you begin
- At least one risk analysis has completed. See Run and schedule a risk analysis.
Open the overview
Go to Vulnerabilities > Overview. Hover over any chart to see the exact numbers.
Read the dashboard
| Widget | What it tells you | Use it to |
|---|---|---|
| By severity | Open vulnerability findings by severity: critical, high, medium and low, from the CVSS base score. | See how much of the backlog is critical. |
| Findings by age group | How long findings have been open: last week, 1 to 4 weeks, 1 to 3 months, and longer. | Find vulnerabilities that have waited for a patch window that never came. |
| Findings by technology | Open vulnerabilities per system type. | Spot a platform that's behind on patching. |
| Open/New vulnerabilities over time | Open findings over time, and how many of them are new. | Tell whether patching keeps up with new advisories. |
| Vulnerabilities solved | How many findings were resolved over time. | Show progress. |
| Top vulnerable systems | The systems with the most open findings, split by severity. | Pick which systems to patch first. |
Watch recently published advisories
The Recently published table lists the ten most recent advisories in the knowledge base, so you see new threats before they show up as findings:
| Column | Meaning |
|---|---|
| Publication date | When the vendor published the advisory. |
| System type | The platform it affects. |
| SA ID | The security advisory identifier, which links to the advisory. |
| Severity | From the advisory's CVSS base score. |
| Status | How many of your systems of that type the advisory was found on (red) versus not found on (blue). |
Tip: A row that's all red means every system of that type is exposed. A row that's all blue means you're already patched, or the affected version isn't in your environment.
[ Next step ]
Related articles
- Prioritize a vulnerability finding
- Check a system version against known CVEs
- Run and schedule a risk analysis
[ Still need help? ]
Our support team can help with vulnerability management. Submit a request
Comments
0 comments
Please sign in to leave a comment.