Vulnerability Intelligence Cards (aka Vulnerability Cards) provide an on-demand summary of essential information related to a specific Vulnerability, and are updated in real time as Recorded Future collects new information. You can use Vulnerability Cards as a starting point when assessing whether this Vulnerability poses a specific risk to your organization, and further can be used in identifying associated indicators of compromise. Vulnerability Cards are also pivot points during investigations that start with another indicator, a malware, or a threat actor.

취약점 카드의 몇 가지 일반적인 구성 요소에 대한 설명은 인텔리전스 카드 개요에서 확인할 수 있으며, 아래의 세부 사항은 취약점 카드에만 해당됩니다:

위험 점수 및 위험 점수 이력 그래프:

For CVEs, the Vulnerability card presents a vulnerability risk score determined by several factors that Recorded Future considers, including the CVSS. More information can be found by looking at the Vulnerability Risk Rules.

각 CVE에는 시간이 지남에 따라 CVE의 위험 점수가 어떻게 변화했는지 시각화한 그래프가 포함됩니다. 그래프에서 원하는 날짜에 마우스를 가져가면 해당 날짜의 CVE에 대한 위험 점수가 표시되고 해당 날짜의 CVE의 중요도가 표시됩니다. 위험 점수 이력 그래프를 사용하면 효과적인 패치 우선순위 전략을 조사하고 결정하는 데 도움이 될 수 있습니다. 

위험 증거, NVD 요약, 영향을 받는 제품 및 주목할 만한 링크

For CVEs, the Vulnerability card includes the latest information about the CVE published by NIST NVD. This includes the text summary of the vulnerability, the set of affected products in the CPE (Common Platform Enumeration), and notable links as identified by NVD. Affected Products are shown with human-readable names, and you can click on any Product Identifier to see the corresponding CPE identifier and CPE well-formed name.

It is common for a very recently disclosed vulnerability to include partial information, while NVD is vetting and confirming portions of the disclosure.

국가 존귀성 데이터베이스 요약:

타임라인

Vulnerability Cards may show two timelines. The first timeline, colored in blue, summarizes all reported events involving this entity in the last 60 days. The second timeline summarizes reported Cyber Attack and Cyber Exploit events specifically. Each day in the cyber event timeline is color-coded by the criticality of the Cyber Threat signal for this entity on that date.

외부 링크

This section includes links to pages with more information about the vulnerability, specifically around patches and remediations. 

최근 참조

이 취약점에 대한 다크웹의 최근 레퍼런스를 조회하는 데 도움이 됩니다.