Skip to main content

Vulnerability Management

What it is​

The core vulnerability lifecycle module. scani5 matches installed software against known CVEs, groups related weaknesses, assesses each finding, and tracks remediation status per asset.

Typical flow​

Agent reports software → CVE match → Threat intel enrichment → Grouping →
Risk scoring → Per-asset vulnerability record → Alerts

Highlights​

  • Software-to-CVE matching — installed products are mapped to standardized identifiers and correlated with the National Vulnerability Database (NVD).
  • CVE grouping — related CVEs are grouped by weakness type (CWE) and affected product, reducing duplicate noise.
  • Per-asset status tracking — each vulnerability on each agent is tracked as Open, Patched, or Mitigated.
  • AI-generated summaries — vulnerabilities receive human-readable names, descriptions, solutions, and mitigation guidance.

Supporting metrics​

MetricRangeWhat it reflects
Exploit Risk0–10Maximum exploitability subscore across grouped CVEs
Impact Risk0–10Maximum impact subscore across grouped CVEs

In the application​

Use the Exposure views to review and remediate vulnerabilities:

  • All Threats — consolidated vulnerability list
  • Applications — software-based vulnerabilities
  • OS — operating system vulnerabilities
  • Identities — identity-related findings

Related scoring modules: Visibility Index, SC5 Risk Score, Business Context Score, Threat Exposure.