Vulnerability Management
From asset inventory and CVSS to evidence-based patching prioritisation.
Short answer: Vulnerability management is the continuous process of identifying, prioritising and remediating vulnerabilities, guided by exploit evidence (KEV) rather than raw CVSS alone.
Evidence: CISA KEV · NVD · EPSS · Human reviewed
Definition
Vulnerability management is the continuous process of identifying, prioritising and remediating vulnerabilities, guided by exploit evidence (KEV) rather than raw CVSS alone.
Major Entities
- CVE CVE-2021-44228 — CVE-2021-44228 (Log4Shell)
- CVE — CVE-2023-23397
Timeline
- — Log4Shell stresses prioritisation
- — KEV + EPSS guide remediation
Latest Intelligence
- KEV-driven prioritisation
- Exploit Prediction Scoring adoption
Evidence & Sources
CISA KEV · NVD · EPSS · NVD · CISA KEV · MITRE ATT&CK
Related Intelligence
- Threat actor: Automated scanning and exploit waves
- Campaign: Mass exploit after disclosure
- Campaign: Patch Gap exploitation
- Research: Prioritisation frameworks (CVSS+KEV)
- Research: Time-to-remediate benchmarks
Next Actions
Part of the OpenTrojan Security Knowledge Hub 2.0: Ransomware · Malware · Threat Intelligence · Cloud Security · Identity Security · Supply Chain · Incident Response · Zero Day · Nation State Threats