Check a system version against known cves

Updated

Follow

[ Applies to ] StorageGuard 9.2 and later  /  All supported storage, backup, SAN and cloud systems  /  Windows and Linux deployments

CVE Search answers a question that comes up before every upgrade and every audit: which known vulnerabilities affect a specific release of a storage or backup platform? You don't need a scanned system; pick the platform, version and patch level, and StorageGuard lists the documented vulnerabilities.

When to use it

  • Before an upgrade: check that the target version isn't affected by an open advisory, so you don't upgrade into a known vulnerability.
  • For a system StorageGuard doesn't scan yet: assess exposure from the version number alone.
  • During an audit: show which advisories apply to a release, with vendor references.
  1. Go to Vulnerabilities > CVE Search.
  2. Select the system type.
  3. Select the version, and the patch level if the platform has one.
  4. Run the search.

Read the results

The results list each advisory that affects the release, with the same information as a vulnerability finding: severity, CVSS score, whether exploits are known, the remediating version, and links to the vendor advisory. For how to read these, see Read the vulnerability fields.

Note: CVE Search reports what the knowledge base knows about a release. It doesn't confirm that a particular system is exposed; a scan and analysis do that, since they see the installed version and configuration.

[ Next step ]

Browse the vulnerability knowledge base to see which advisories StorageGuard checks for, and to deactivate ones that don't apply to you.

[ Still need help? ]

Our support team can help with vulnerability management. Submit a request

Comments

0 comments

Please sign in to leave a comment.