From c4ec018e7526b038efffaa926fff66767a14672d Mon Sep 17 00:00:00 2001 From: Tim Lee Date: Wed, 30 Oct 2024 10:30:58 -0600 Subject: [PATCH] Docs - update vuln sources (#23388) adding detail to docs vulnerability sources reference: https://github.com/fleetdm/fleet/issues/22564#issuecomment-2445071589 --- articles/vulnerability-processing.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/articles/vulnerability-processing.md b/articles/vulnerability-processing.md index 610bd51347..a830710093 100644 --- a/articles/vulnerability-processing.md +++ b/articles/vulnerability-processing.md @@ -28,9 +28,9 @@ For Ubuntu Linux, kernel vulnerabilities with known variants (ie. `-generic`) ar ## Sources Fleet combines multiple sources to get accurate and up-to-date CVE information: -- [National Vulnerability Database](https://nvd.nist.gov/developers/vulnerabilities) CVE feeds -- [VulnCheck](https://vulncheck.com/) CVE feeds -- [Mac Office release notes](https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac) for Office for Mac +- [National Vulnerability Database](https://nvd.nist.gov/developers/vulnerabilities) CVE feeds and CVSS scores from primary sources (available on Fleet Premium). +- [VulnCheck](https://vulncheck.com/) Enriched NVD CPE data +- [Mac Office release notes](https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac) Office for Mac vulnerabilities - [Microsoft MSRC Security Bulletins](https://msrc.microsoft.com/update-guide) for Windows OS vulnerabilities - [OVAL definitions](https://github.com/fleetdm/nvd/blob/master/oval_sources.json) for Linux software