topic Re: Vulnerability Assessment - missing CVE? in Cortex XDR Discussions

Vulnerability Assessment - missing CVE?

RFeyertag — Sat, 18 Mar 2023 12:04:55 GMT

How fast are these CVEs being updated?

This one is missing in our list:

https://nvd.nist.gov/vuln/detail/CVE-2023-23415

BR

Rob

Re: Vulnerability Assessment - missing CVE?

PavelK — Sat, 18 Mar 2023 12:43:33 GMT

Hello @RFeyertag

2 days ago Palo Alto has published this KB article covering vulnerabilities from March 2023 patch Tuesday. The CVE you mentioned in your post was addressed with Threat ID 93571.

Kind Regards

Pavel

Re: Vulnerability Assessment - missing CVE?

RFeyertag — Sat, 18 Mar 2023 13:40:53 GMT

Hello @PavelK,

do you know how long will it take to see it in cortex xdr pro?

Rob

Re: Vulnerability Assessment - missing CVE?

PavelK — Sat, 18 Mar 2023 23:56:50 GMT

Thank you for reply @RFeyertag

unfortunately, I do not know. As of now, the coverage is only for PAN-OS. I would perhaps open a ticket or contact account team to get more more information on this.

Kind Regards

Pavel

Re: Vulnerability Assessment - missing CVE?

mavraham — Sun, 19 Mar 2023 17:50:10 GMT

Hi @RFeyertag,

I've checked and it is not yet covered by XDR. The best place to ask about CVE coverage would be by raising a support ticket through the support portal and asking when/if said CVE would be added to the scope of XDR.

Hope this helps.