Vulnerability scanner

[German DiCasas]

Hi team,

I have the wazuh 4.14 and I can see all the vulnerabilities over my linux/windows sistems. But I can see that sometimes the vulnerability is show but there are no fix to fix that . I mean, the vendor have no fix for that cve.

There are any way to see the vulnerabilities list but with another column with that situation ? I mean, if the vulnerability have or not a oficial fix? I do now if that it is possible to see over wazuh. Some time the CVE exist and I can fix with oficial fix and sometimes do not exist the oficial fix.

Regards

German

[Rodrigo López]

Hi German,

There's a field called data.vulnerability.package.condition that I think it gives you what you're looking for.

• if it is "Package unfixed" the vendor hasn't released a patch.

The quickest way to see this alongside your vulnerabilities is through Vulnerability Detection > Events in the Wazuh dashboard. You can add data.vulnerability.package.condition as a column using the column picker or the field list on the left. Once it's there, you can sort by it to group all the Package unfixed ones together. Or you can add a filter.

Best regards.