Overview
CISA provides a routinely updated list of vulnerabilities that attackers have used in real world applications. Ryskview has adopted the use of the Known Exploited Vulnerabilities catalog as input into our vulnerability prioritization metrics. This will allow users to identify KEV quickly and prioritize remediation accordingly.
Ryskview Adaptation
Inside Ryskview, a red KEV shield is displayed next to vulnerabilities on the KEV list. Any page that displays the plugin ID of a vulnerability will also show the KEV shield icon. Users can see associated vulnerabilities on the Scan Data page and Vulnerabilities page. Clicking on the shield icon will display a modal with the related CVEs ID and description, a link to the Common Enumeration of Vulnerability (CVE) ID page, link to the Common Weakness Enumeration (CWE) ID page, and in the additional information section, a link to the National Vulnerability Database for the CVE ID.
User should prioritize remediating vulnerabilities on the KEV list. On the Dashboard page, the To Do tile has the total number of assets with KEVs. Clink the value will open a new Asset page, filtered to display the assets. Users can improve their Cyber posture and Rysk Score by remediating these KEVs or creating POAMs.
