Forum Discussion
An_admin_123
Oct 05, 2023Copper Contributor
Finding software listed under Security Recommendations
A list of devices exposed to a weakness caused by out of date software is not useful if I can't determine where the software it's complaining about is installed. I select a device on the inventor...
- Oct 08, 2023Hi An_admin_123,
When you're on a device, and press 'Security Recommendations', and click 'Update Teams' for example, click this which opens the tab on the right hand side, this will tell you the CVE associated with the vulnerability as well as a 'Report Inaccuracy' button.
It's also important to note that if a device doesn't have the application, it could be a vulnerable library or dependancy - before reporting inaccuracy's, I'd suggest just checking out the CVEs and seeing what the vulnerability is.
Are you getting this with all vulnerabilities or just a handful?
exss
Oct 08, 2023Copper Contributor
Hi An_admin_123,
When you're on a device, and press 'Security Recommendations', and click 'Update Teams' for example, click this which opens the tab on the right hand side, this will tell you the CVE associated with the vulnerability as well as a 'Report Inaccuracy' button.
It's also important to note that if a device doesn't have the application, it could be a vulnerable library or dependancy - before reporting inaccuracy's, I'd suggest just checking out the CVEs and seeing what the vulnerability is.
Are you getting this with all vulnerabilities or just a handful?
When you're on a device, and press 'Security Recommendations', and click 'Update Teams' for example, click this which opens the tab on the right hand side, this will tell you the CVE associated with the vulnerability as well as a 'Report Inaccuracy' button.
It's also important to note that if a device doesn't have the application, it could be a vulnerable library or dependancy - before reporting inaccuracy's, I'd suggest just checking out the CVEs and seeing what the vulnerability is.
Are you getting this with all vulnerabilities or just a handful?
- An_admin_123Oct 09, 2023Copper ContributorThanks, I've seen the CVE pages. They don't really help with what I need to do, just obscure descriptions and links to other pages.
I did however eventually find the Software Inventory where for certain items there's a file path for what they have listed and in the case of Teams at least it seems it's in AppData\Local despite my having uninstalled it. Just an uninstaller not cleaning up properly, sadly familiar.
That's helping, there are others but they often just have a registry path for locating the problem software. It's not great but it gives me a start.