Issue for detecting CVE

To summarize that there is no issue here (info taken from CVE-2022-4877 severity - #2 by cfi):

  • The SecInfo -> CVEs view is completely unrelated to any vulnerability tests (expect “CVE scans”) and is supplemental data for cross-references and similar (SCAP data).
  • If a CVE is listed in SecInfo -> CVEs it doesn’t mean that a VT which could be used during scans exists.
  • The availability of a VT needs to be looked up via SecInfo -> NVTs instead.
  • A VT for CVE-2022-35914 is available in the Greenbone Enterprise Feed only.
3 Likes