topic Cortex WIndows ulnerability assessment in Cortex XDR Discussions

Cortex WIndows ulnerability assessment

RajeshPremSingh — Thu, 19 Dec 2024 12:25:34 GMT

"A few months ago, I heard that Cortex only detected application vulnerabilities on Linux, but on Windows, it only detected OS vulnerabilities. Is this issue resolved now, and does Cortex detect application vulnerabilities on Windows?"

Re: Cortex WIndows ulnerability assessment

jmazzeo — Thu, 19 Dec 2024 12:59:47 GMT

Hi @RajeshPremSingh, thanks for reaching us using the Live Community.

Since April 2024 with the release of XDR 3.10 the Enhanced Vulnerability Assessment is available, to scan and detect software vulnerabilities on Windows and MacOS endpoints (Linux was already available as you mention).

The requirements are Cortex XDR Pro and the Host Insights Add-on. More information and how to enable it is available in the official documentation.

If this post answers your question, please mark it as the solution.

Re: Cortex WIndows ulnerability assessment

RFeyertag — Fri, 20 Dec 2024 19:36:53 GMT

Hi @jmazzeo ,

when do you think all applications will be covered? My tightvnc is still not shown in the list.

Rob

Re: Cortex WIndows ulnerability assessment

jmazzeo — Mon, 23 Dec 2024 14:42:56 GMT

Where are you trying to find the application?

If the applications is portable, it will not show in the console.

Re: Cortex WIndows ulnerability assessment

RFeyertag — Thu, 02 Jan 2025 15:49:23 GMT

it is not portable, it is installed and cortex can find it in the application list of windows.

https://nvd.nist.gov/vuln/detail/CVE-2024-42049

In the documentation you can find the "not all covered" information. But when will it work?

Rob