Query > Vulnerabilities Date Published > 30 days ago

Hi all,

We want IVM to report on missing Windows patches published before 30 days.

I used this query but it is still reporting Windows patches published within 30days.


Any help will be apreciated.

I’ve opened a ticket with them but my only available appointment is next week.

Correct me if I’m wrong, but you are looking at when the vulnerability was published, not when the patch for it was released? Vulnerabilities come out days to months before a patch is released and Nexpose is looking for systems susceptible to a vulnerability not what patches are installed to fix them. I would think that you would need a list of CVEs that a patch addresses and look for systems that are still vulnerable to them?

Hi Brandon,

I am new to this IVM tool.

Will discuss with Support.

Thank you.