Anyone have a SQL to find fixable asset by Solution?
This may or may not turn out to be a low hanging fruit, but need to see if there is a good Return on Investment (ROI) for deploying by solution.
Like when you see 1 asset, with 1 solution that fixes 400+ CVE’s - seems like a great opportunity!
So, this will be every Microsoft monthly update from now on based on the last few months vuln rate 
I know you’ve specifically asked for a SQL solution, and I probably do have something I could provide if needed although this will require some digging on my part.
Before I do that, I’ll play devils advocate a bit - are you already approaching vulnerabilities based on risk (which is better than approaching it by count)? A couple of options, if you don’t specifically want a SQL solution, are the built-in Top Remediations with Details report or using Remediation Projects. These work based on biggest impact to risk rather than count specifically but these do go hand-in-hand a lot of the time.
If you do specifically need a SQL solution then let me know.
I was leaning towards SQL report as the options in Power Query don’t have the finesse I am looking for to draw out the related software by asset.
If the solution says “upgrade to xx.x version, but the software version is already above that - then thats a potential false positive.
If its below, then the details will benefit the stakeholders to complete impact assessments for the upgrade.
Thanks!
You can check here to see if any of these fit: insightvm-sql-queries/sql-query-export at master · rapid7/insightvm-sql-queries · GitHub
sorry, i didn’t receive an alert that you’d replied to my earlier message. I’ll have a look at what reports I have and will let you know (although they may well be based on reports already in the GitHub linked by CW in this thread so you might already have something)
Not sure if you’ve seen it or not, but if you are using any sort of locally installed enterprise LLM, like claude code, etc. Rapid7 IVM has a MCP server now. So you can open up claude code, ask it to give you the top 5 most effective remediation actions, and it can actually evaluate the data and give you low hanging fruit. I’ve tested this a few times and actually had it evaluate effort and time it would take to make the changes as well. Pretty powerful stuff. GitHub - rapid7/rapid7-bulk-export-mcp: Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills. · GitHub