Vulnerability Catalog Report

The Vulnerability Catalog report surfaces all vulnerabilities that are tracked in the Bitsight platform. Use this report to check if a vulnerability is already available when requesting a new vulnerability to be added.

The report includes the following information:

• A catalog of vulnerabilities and their details.
• Remediation instructions. Prominent vulnerabilities have a Common Vulnerabilities and Exposures (CVE) ID. Use this ID in web searches or in the National Vulnerability Database (NVD) for more information about the vulnerability in question.

Available in the Findings and Infrastructure section of the Reports page. See the reports repository for a list of all reports.

Vulnerability Details

The report can include the following information:

Name

Prominent vulnerabilities have a Common Vulnerabilities and Exposures (CVE) ID. Use this ID in web searches or in the National Vulnerability Database (NVD) for more information about the vulnerability in question.

Bitsight Severity

The Bitsight severity [of a vulnerability], based on the CVSS v3 base score. Learn more about the difference between Bitsight Severity and the CVSS scoring models.

Classification

The detection status of the vulnerability.

Support Started

Date when coverage for this vulnerability started.

Companies Impacted

The number of companies in your portfolio that are affected by the vulnerability. Click on this field to view your portfolio.

Description

A description of the vulnerability.

Remediation

Remediation instructions (if available).