No Exploit Information - Vulnerability Response Integration With NVD

Wojciech Werysz
Kilo Guru

exploit exist.png

Hello, I just noticed the NVD integration does not give the exploit information. I checked the Shodan integration, and it provides the enrichment for exploit info, however I am not sure is it the best solution. I know some of the active scanners provide this information too - i.e., Qualys with their QID vulnerability data base which is built on CVE/NVD, possibly Tenable and few others.

 

However, my problem is - what if I cannot really install any of the other active scanners and Shodan integrations? Doesn't it make the NVD integration partially unusable? (Exploitability is a part of the vulnerability calculators).

 

Do you think is there any solution for this issue?

0 REPLIES 0