Viewing CVEs

The CVEs tab provides a consolidated view of vulnerability intelligence categorized by recency, trending activity, and exploit status. It is divided into three sub-tabs, each offering focused insights and dynamically updated summary metrics.

To view the vulnerabilities detected on your assets, navigate to the Risk Management > Findings page and select Vulnerability. You can also use various metadata filters, group by options, and custom query capabilities.

Following is the CVE data listed on the CVEs page:

Title: Indicates the CVE name
QVSS: Qualys Vulnerability Scoring System (QVSS) is the scoring framework used in ETM to measure the severity of all security exposures, both vulnerabilities and misconfigurations, on a 0.0–10.0 scale.
CVSS
Exploitability Focus on vulnerabilities with POC or Weaponized exploits.
Risk Factors: Indicates the conditions or attributes that increase the likelihood or severity of a vulnerability being exploited.
Threat Actor
WOW
Asset Impact: Shows the potential damage or business effect if the vulnerability is successfully exploited.
EPSS Score: Displays the Exploit Prediction Scoring System value that estimates the probability of the vulnerability being exploited in the near term.
Detection Count: Represents the number of times this vulnerability has been identified across your monitored assets or environment.
The following Vulnerabilities screenshot under the Risk Management > Findings tab highlights its columns:

Search CVEs

Choose Vulnerability to display vulnerability data or Asset for asset data. You can easily browse the data list and explore details. For example, click the CVE 2021-40438 to view details for that vulnerability.
The Group By option helps you organize your data. For example, you can select Group By Severity and then click any value listed in the Detection Count column to view the list of assets with the assigned severity.
Use a filter. The filter option lets you choose the type of vulnerabilities to exclude from the data list.
Use Quick Filters located in the left navigation. The Quick Filters option lets you choose the type of vulnerabilities to further filter them.
Use search tokens to filter vulnerabilities further.
Customize the display of rows and columns as per your needs. You can choose which columns to show or hide based on their preferences

Sub-Tabs in the CVEs

The CVEs tab contains the following views:

Newly Added

Shows CVEs that have recently been added to the Qualys threat intelligence database.
Use this tab to understand newly emerging risks as they appear in the ecosystem.

Trending

Displays CVEs that are currently gaining traction across the threat landscape.
These vulnerabilities are increasingly observed in real-world exploitation, scanning, or discussion.

Actively Exploited

Contains CVEs that are currently being exploited in the wild.
This view highlights the highest-priority items requiring immediate attention.

Dynamic Cards and Key Indicators

Each sub-tab presents a set of summary cards that reflect data relevant to the selected tab.
These cards show counts and intelligence for:

CISA Known Exploits: Displays the number of vulnerabilities listed in the CISA Known Exploited Vulnerabilities catalog.
Ransomware Vulnerabilities: Shows the count of vulnerabilities associated with ransomware activity.
Actively Exploited: Indicates how many vulnerabilities are currently being exploited in the wild.
Impacted: Reflects the number of assets affected by the vulnerabilities in the selected view.
Patch Available: Shows how many vulnerabilities have a vendor-released patch available for remediation.

Dynamic Card Update by Tab Selection

Each time you switch between Newly Added, Trending, or Actively Exploited tabs, the cards automatically update to display metrics relevant to that category.

Example:

When you are in the Newly Added tab, the Patch Available card indicates the number of newly added CVEs that have a patch available.

Clicking that card opens a list of only those CVEs (from the Newly Added set) that have a patch.

Interactive Workflow

The cards in each sub-tab serve as filters:

Select a sub-tab (for example, Newly Added).
Click a card such as Patch Available, CISA KEV, or Ransomware Vulnerabilities.
The UI displays the filtered list of CVEs that belong to the selected sub-tab and the chosen card category.

This makes it easy to drill down into exactly the type of CVEs you want to analyze.

The CVEs tab helps you quickly explore vulnerabilities based on:

When they emerged (Newly Added)
How relevant or widespread they are (Trending)
Whether they are being exploited now (Actively Exploited)