Find a vulnerability
- Open Security > Vulnerabilities.
- Confirm the company selection.
- Filter using CVE or Software. Use one text filter at a time: when both are filled, CVE takes precedence.
- Narrow by Company, Priority, Known Exploited, or a CVSS range.
- Review further pages as needed. The table loads 20 findings per server page.
Read the columns
A Known Exploited flag identifies a property of the vulnerability; it is not proof that your company was attacked. A missing score or a No flag is not a guarantee that software is safe. Ask your MSP to assess the finding in context.
The CVE link opens reference information outside MSPortal. This table does not open a local vulnerability editor, install a patch, or mark the finding remediated.
Plan follow-up
Company users can start with the Home AI Assistant, including the CVE, company, software, and provider result. Review and confirm the support request when prompted. Permitted staff can select same-company findings and create one linked Planner item, or add separate meeting agenda items. Completing the follow-up item does not itself update or rescan Cork.If the result looks wrong
Check company scope and active filters. Keep the main company selector and Company column filter aligned. Use either CVE or Software text filtering at a time. If a load-error notification appears, retry or reload before trusting remaining rows; earlier results may still be visible. Ask the MSP to compare the imported result with the provider and check synchronization. This table does not display a per-row sync timestamp or provide a CSV export action.Frequently asked questions
Why is my Software filter ignored when I enter a CVE?
Why is my Software filter ignored when I enter a CVE?
The page uses one text-search value. A populated CVE filter takes precedence over Software.
Does Known Exploited prove our company was compromised?
Does Known Exploited prove our company was compromised?
No. It is an imported flag about the vulnerability. Your MSP must assess the affected environment and any separate incident evidence.
Where does the CVE link go?
Where does the CVE link go?
It opens the corresponding National Vulnerability Database reference in a new tab. It does not change the finding.
Does adding a vulnerability to Planner patch it?
Does adding a vulnerability to Planner patch it?
No. It creates follow-up work. Patching, verification, and provider rescanning are separate tasks.