Explore the KnowledgeBase

Our KnowledgeBase of vulnerabilities is the largest and most up-to-date in the security industry.

What do you want to do?

Search for a vulnerabilitySearch for a vulnerability

You can search for vulnerabilities using a variety of criteria like severity level, category, patch availability, CVSS scores, published date, etc. Click Search, select your criteria, and then click Search again. Learn more.

Search by User Modified date

When you search for a vulnerability using the User Modified criteria with the "Previous" options, we'll start with the current date and count backward to get the date range.

Previous Week = the last week starting from Sunday to Saturday

Previous Month = the last month starting from 1st to end of the month

Previous Quarter= the last quarter (3 complete months of the quarter starting from 1st to end of each month)

Previous Year = the last year starting from January to December

Search by Code Modified Date

When you search for a QID and if that QID has the code modified date, you can view the code modified date in the KnowledgeBase. You can view the code modified date on the following two pages

Preview window of KnowledgeBase listing page
Vulnerability Information page of a selected QID.

View vulnerability informationView vulnerability information

Select Info from the Quick Actions menu to view complete vulnerability information like a description of the threat, reference IDs, and more.

You can also view the QIDs for the detection of vulnerabilities through technology types in the technology field associated with the SCA QID.

Edit a vulnerabilityEdit a vulnerability

Select Edit from the Quick Actions menu to do any of the following:

- change the severity level

- add comments to the description

- disable the vulnerability (in order to globally filter it out from all hosts in all scan reports)

Download the vulnerabilities list Download the vulnerabilities list

Go to New > Download, and then choose a file format (CSV or XML). Only the rows and columns shown in the data list will be included in the downloaded report. Learn more.

Create custom vulnerability (QID) using scripts Create custom vulnerability (QID) using scripts

You can create Custom QIDs using CAR scripts. Custom QID allows you to customize vulnerabilities. You can define various aspects related to vulnerability such as Vulnerability Type, Severity Level, QID Type, along with descriptions of threats, impact, and solutions.

1. Go to VM/VMDR > KnowledgeBase > New > Custom Vulnerability (QID).

2. Provide the information for creating the custom vulnerability using the script in the wizard. You can view your custom vulnerability in the KnowledgeBase tab. To know more about how to create custom QIDs, refer to the Custom Assessment and Remediation Online help.

Search custom QIDsSearch custom QIDs

In the KnowledgeBase, you can access information regarding custom QIDs. You can create Custom QIDs using CAR scripts. Custom QID allows you to customize vulnerabilities. To learn about how to search Custom QIDs, refer to the topic Search Custom QIDs.

View Patch Published DateView Patch Published Date

The Patch Published Date displays the date on which the patches for the QID were first released.

Vulnerability Information QID window with patch published date field

Check out this video:

Interested in more capabilities?

Check out: Ignore/Activate a Vulnerability | Report on Vulnerabilities by Published Date | Add a New OVAL Vulnerability

Certain capabilities may not be available depending on your service level.