CVEs for applications Unsupported Platform

DopedWafer — Wed, 22 Jan 2025 14:53:40 GMT

We have quite a bit of different softwares installed here, many Adobe products, 7-zip etc which I know have CVEs issued. Do I need to do something to enable this feature in XDR? ALL of the software detected shows Unsupported Platform. Does this feature actually work?

Re: CVEs for applications Unsupported Platform

nsinghvirk — Wed, 22 Jan 2025 17:32:27 GMT

Hello @DopedWafer

Thanks for reaching out on LiveCommunity!

Please check if you meet all the prerequisites for vulnerability assessment.

Requirement	Description
Licenses and Add-ons	Cortex XDR Pro per Endpoint license. Host Insights Add-on.
Supported Platforms	Windows Cortex XDR agent 7.1 or a later release. Cortex XDR lists only CVEs relating to the operating system, and not CVEs relating to applications provided by other vendors. Cortex XDR retrieves the latest data for each CVE from the NIST National Vulnerability Database as well as from the Microsoft Security Response Center (MSRC). Cortex XDR collects KB and application information from the agents but calculates CVE only for KBs based on the data collected from MSRC and other sources For endpoints running Windows Insider, Cortex XDR cannot guarantee an accurate CVE assessment. Cortex XDR does not display open CVEs for endpoints running Windows releases for which Microsoft no longer fixes CVEs. Linux Cortex XDR agent 7.1 or a later release. Cortex XDR collects all the information about the operating system and the installed applications, and calculates CVE based on the the latest data retrieved from the NIST. MacOS Cortex XDR agent 7.1 or a later release. Cortex XDR collects only the applications list from MacOS without CVE calculation. If Cortex XDR doesn't match any CVE to its corresponding application, an error message is displayed, "No CVEs Found".
Setup and Permissions	Ensure Host Inventory Data Collection is enabled for your Cortex XDR agent.
Limitations	Cortex XDR calculates CVEs for applications according to the application version, and not according to application build numbers.

topic CVEs for applications Unsupported Platform in Cortex XDR Discussions

CVEs for applications Unsupported Platform

Re: CVEs for applications Unsupported Platform