Vulnerabilities

Vulnerabilities lists every CVE matched to a resource in this facility. A Vulnerabilities Over Time chart (by severity) and a Riskiest Resources table sit above the list, ranking resources by their highest Safetybits Risk Score (SRS). See Vulnerability model for how a match is made and how SRS combines CVSS and EPSS into one number.

The list itself shows, per CVE, how many resources it affects and its SRS, CVSS, EPSS, and CISA KEV status. Click a CVE to open its detail.

CVE detail

The detail page repeats the CVE’s description and its four scores (SRS, CVSS with base severity and score, EPSS, and CISA KEV), then breaks the CVSS vector down metric by metric (attack vector, attack complexity, privileges required, and the rest), for both CVSS v2 and v3 where available.

External References links out to the CVE’s entry at NIST NVD, MITRE CVE, ENISA’s EU Vulnerability Database, and INCIBE (Spain’s national cybersecurity institute), plus a vendor advisory link when one is available, for example a Siemens advisory for a Siemens CVE.

A Resources Affected table lists every resource in this facility this CVE applies to, with its own SRS, so you can pivot from a CVE straight to the devices you need to patch or isolate.