Manage vulnerabilities
After you’ve matched SBOM dependency components to software components in the NVD, which could be one or more match sources, you’ll be able to see any reported vulnerabilities for those dependency components.
IMPORTANT: If you have a Matched status that does not have an NVD badge, this has not been matched in the NVD, which means that it either does not have vulnerabilities or has a different name in the NVD. Refer to Resolve matched statuses for more information. You must identify an exact match in the NVD in order to see vulnerabilities for that dependency component.
View vulnerabilities for a product and version
In the Vulnerabilities page, select the product and version that you want to filter on.
Filter vulnerabilities
Filter down to just what you need:
Narrow down vulnerabilities by criteria such as severity, exploitability, and threat information.
Select "Any" or specific parameters in filter drop-downs.
Use text filters for direct input.
Vulnerability columns
View vulnerabilities across all products and versions
If you don't have a product and version selected in the Vulnerabilities page, you'll see all vulnerabilities for all products across all versions.
Last updated