Query > Vulnerabilities Date Published > 30 days ago

InsightVM Query Builder
1

Hi all,

We want IVM to report on missing Windows patches published before 30 days.

I used this query but it is still reporting Windows patches published within 30days.

image

Any help will be apreciated.

I’ve opened a ticket with them but my only available appointment is next week.

2

Correct me if I’m wrong, but you are looking at when the vulnerability was published, not when the patch for it was released? Vulnerabilities come out days to months before a patch is released and Nexpose is looking for systems susceptible to a vulnerability not what patches are installed to fix them. I would think that you would need a list of CVEs that a patch addresses and look for systems that are still vulnerable to them?

3

Hi Brandon,

I am new to this IVM tool.

Will discuss with Support.

Thank you.