Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Careers

Contact Us

Vulnerability Cards

<p>
  Vulnerability Intelligence Cards (aka Vulnerability Cards) provide an on-demand
  summary of essential information related to a specific Vulnerability, and are
  updated in real time as Recorded Future collects new information. You can use
  Vulnerability Cards as a starting point when assessing whether this Vulnerability&nbsp;poses
  a specific risk to your organization, and further can be used in identifying
  associated indicators of compromise. Vulnerability Cards are also pivot points
  during investigations that start with another indicator, a malware, or a threat
  actor.
</p>
<p>
  Descriptions of several common components of the Vulnerability Card are found
  in the&nbsp;<a href="https://support.recordedfuture.com/hc/en-us/articles/115001398928">Overview of Intelligence Cards</a>;
  the details below are specific to the Vulnerability Card:
</p>
<p>
  <span class="wysiwyg-font-size-large">Risk Score and Risk Score History Graph:</span>
</p>
<p>
  For CVEs, the Vulnerability card presents a vulnerability risk score determined
  by several factors that Recorded Future considers, including the CVSS. More information
  can be found by looking at the
  <a href="https://support.recordedfuture.com/hc/en-us/articles/115000894468">Vulnerability Risk Rules</a>.
</p>
<table style="border-collapse: collapse; width: 92.0006%; height: 36px;" border="1">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip9_626b8efbfe.png" alt="mceclip9.png" />

      </td>
    </tr>
  </tbody>
</table>
<p>
  <span style="font-weight: 400;"><br>Each CVE will include a graph that visualizes how the CVE’s risk score has changed over time. Hovering over any day in the graph will display the risk score for the CVE on that given day and indicate the criticality of the CVE on that given day. Using the risk score history graph can help investigate and determine an effective patch prioritization strategy.&nbsp;</span>
</p>
<p>
  <span style="font-weight: 400;"><span class="wysiwyg-font-size-large" style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif;">Risk Evidence, NVD Summary, </span><span style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif; font-size: large;">Affected Products, and Notable Links</span></span>
</p>
<p>
  For CVEs, the Vulnerability card includes the latest information about the CVE
  published by NIST NVD. This includes the text summary of the vulnerability, the
  set of affected products in the CPE (Common Platform Enumeration), and notable
  links as identified by NVD. Affected Products are shown with human-readable names,
  and you can click on any Product Identifier to see the corresponding CPE identifier
  and CPE well-formed name.
</p>
<table style="border-collapse: collapse; width: 91.7143%;" border="1">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip1_989f10b503.png" alt="mceclip1.png" />

      </td>
    </tr>
  </tbody>
</table>
<p>
  It is common for a very recently disclosed vulnerability to include partial information,
  while NVD is vetting and confirming portions of the disclosure.
</p>
<p>
  <span class="wysiwyg-font-size-large">National Venerability Database Summary:</span>
</p>
<table style="border-collapse: collapse; width: 91.8571%;" border="1" data-mce-id="__mce">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip4_400b2f2b8b.png" alt="mceclip4.png" />

      </td>
    </tr>
  </tbody>
</table>
<p>
  <span class="wysiwyg-font-size-large">Timelines</span>
</p>
<p>
  Vulnerability Cards may show two timelines. The first timeline, colored in blue,
  summarizes all reported events involving this entity in the last 60 days. The
  second timeline summarizes reported&nbsp;Cyber Attack and Cyber Exploit events
  specifically. Each day in the cyber event timeline is color-coded by the criticality
  of the Cyber Threat signal for this entity on that date.
</p>
<table style="border-collapse: collapse; width: 87%; height: 599px;" border="1" data-mce-id="__mce">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip5_d7eb00d58b.png" alt="mceclip5.png" />

      </td>
    </tr>
  </tbody>
</table>
<p>
  <span class="wysiwyg-font-size-large">External Links</span>
</p>
<p>
  This section includes links to pages with more information about the vulnerability,
  specifically around patches and remediations.&nbsp;
</p>
<table style="border-collapse: collapse; width: 87.4286%; height: 35px;" border="1" data-mce-id="__mce">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip6_96198e6849.png" alt="mceclip6.png" />

      </td>
    </tr>
  </tbody>
</table>
<p>
  <span class="wysiwyg-font-size-large">Recent Reference</span>
</p>
<p>
  Helpful lookup of a recent references on the Dark Web for this vulnerability.
</p>
<table style="border-collapse: collapse; width: 87.7143%;" border="1" data-mce-id="__mce">
  <tbody>
    <tr>
      <td style="width: 100%;"><img src="https://cms.recordedfuture.com/uploads/mceclip7_b81cda880a.png" alt="mceclip7.png" />

      </td>
    </tr>
  </tbody>
</table>

Refine your search

We could not find any results for your search, so why not start with the articles listed below?

취약점 카드