Donald Allport, 2 template reports display CVE IDs today:
- Top Ten Missing Cve Ids (for a Patch Group): it displays, for a patch group, the list of cve ids and for each of them, list of patches and affected devices.
- Missing Bulletin Details (for a Patch Group): it displays, for a patch group, the list of bulletins and for each of them, the list of CVE IDs and affected devices.
Ted. Thank you for the response. Those reports do give CVE, any idea where the CVE information in those reports comes from so that column can be added to a report? We send a report each month that contains all patches applied since 1/1/20 for every device (compliance). Report contains Patch Name and Bulletin Name, just hoping there is a way to get the CVE information included for all the installed Patches.
Thank you again for response.
Template reports are based on hard-coded queries, they cannot be changed on the fly. Any change in these queries requires also a change in the chilli file generating the report. What is the report you are using?
Cve Ids are retrieved from a sql table: PatchesCVE (PatchID, CveID).
Thank you very much, will investigate creating a SQL query to get what we need.