Before you start
- You need Security read access.
- Cork must be connected and its companies mapped. Without Cork, the Vulnerabilities tab does not appear. See Enable the Cork integration.
Find a vulnerability
1
Open Vulnerabilities
Open Security > Vulnerabilities and check the company selector.
2
Search by CVE or software
Type in the CVE or Software column filter. Use only one at a time. When both are filled, the CVE search is used.
3
Narrow the list
Use Company to pick companies, Priority to pick a priority, Known Exploited to pick Yes or No, and CVSS to set a score range.
4
Sort and page
Click a column header to sort. The table shows 20 vulnerabilities per page.
Read the columns
Known Exploited describes the vulnerability, not your company. It does not mean you were attacked. A missing score or a No does not mean the software is safe.
The table is read-only. You cannot patch, mark a finding fixed, or export a CSV here.
Plan follow-up
Select rows from one company, then open Actions (N) in the page header.- Add to Planner creates one Planner item that links every selected vulnerability. See Add security findings to Planner.
- Add to Meeting adds one agenda entry per vulnerability. See Add Cork findings to a meeting agenda.
Troubleshooting
Frequently asked questions
Why is my Software filter ignored when I enter a CVE?
Why is my Software filter ignored when I enter a CVE?
The page sends one search value. A filled CVE filter takes priority over Software.
Does Known Exploited mean our company was compromised?
Does Known Exploited mean our company was compromised?
No. It flags the vulnerability. Your MSP must check your environment.
Where does the CVE link go?
Where does the CVE link go?
To the National Vulnerability Database page for that CVE, in a new tab. It changes nothing in MSPortal.
Does adding a vulnerability to Planner patch it?
Does adding a vulnerability to Planner patch it?
No. It creates follow-up work. Patching and rescanning happen outside MSPortal.
I am a company user. How do I ask about a vulnerability?
I am a company user. How do I ask about a vulnerability?
Tell the Home AI Assistant the CVE, company, and software, then confirm the request when prompted.