Vulnerability Management

Scanning, assessment, prioritization, remediation, and compliance tracking.

Overview

Vulnerability management identifies and fixes security weaknesses.

Lifecycle

Architecture Diagram

┌─────────────┐
│ Discover    │ ← Asset inventory
├─────────────┤
│ Scan        │ ← Vulnerability scanning
├─────────────┤
│ Assess      │ ← Risk evaluation
├─────────────┤
│ Prioritize  │ ← Remediation order
├─────────────┤
│ Remediate   │ ← Fix vulnerabilities
├─────────────┤
│ Verify      │ ← Confirm fixes
├─────────────┤
│ Report      │ ← Documentation
└─────────────┘

Scanning Tools

Tool	Type	Cost
Nessus	Commercial

| | OpenVAS | Open Source | Free | | Qualys | Cloud |

Vulnerability Scoring (CVSS)

Architecture Diagram

CVSS Score Range:
0.0 - 3.9  → Low
4.0 - 6.9  → Medium
7.0 - 8.9  → High
9.0 - 10.0 → Critical

CVSS Vector:
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  │     │     │     │     │   │   │   │
  │     │     │     │     │   │   │   └─ Availability
  │     │     │     │     │   │   └───── Integrity
  │     │     │     │     │   └───────── Confidentiality
  │     │     │     │     └───────────── User Interaction
  │     │     │     └─────────────────── Privileges Required
  │     │     └───────────────────────── Complexity
  │     └─────────────────────────────── Attack Vector
  └───────────────────────────────────── Version

Scanning Scripts

# Nmap vulnerability scan
nmap --script vuln target.com

# OpenVAS scan
omp -u admin -w password -X '<get_targets/>'

Remediation Priorities

Priority	CVSS	SLA
P1	9.0-10.0	24 hours
P2	7.0-8.9	7 days
P3	4.0-6.9	30 days
P4	0.1-3.9	90 days

Practice

Set up OpenVAS and perform a vulnerability scan on a test network.

Vulnerability Management

Vulnerability Management

Overview

Lifecycle

Scanning Tools

Vulnerability Scoring (CVSS)

Scanning Scripts

Remediation Priorities

Practice

Need Expert Cybersecurity Help?