Credential Scan Windows not Showing CVEs from installed Applications

Getting Started
1

Hello,
I am currently trying to perform a scan of my Windows systems using Greenbone. However, I have noticed that no vulnerabilities related to patch levels or third-party applications on the systems are being displayed.

An example would be the 7-Zip application on a Server 2022.
This application is outdated and currently has several known CVEs.

In addition, no information about missing Windows updates or the resulting CVEs is being shown either.

The scan is being executed using a Domain Admin account to avoid any permission-related issues.

Thanks for your help!
Kind regards

2

Requirements for a successful scan of Windows systems are tracked in the following documentation:

9.3.3 Requirements on Target Systems with Microsoft Windows

Most likely there is some insufficient configuration on the target system which prevents e.g. access to the remote registry or similar.

2 Likes