Session Relevance problem

Reporting
1

(imported topic written by sinucus)

I’m having some trouble with this session relevance and I can’t figure it out.

I’m trying to pull back the fixlets and their respective CVE id’s but it’s tuncating the data. Anyone have any ideas?

(cve id lists of it, id of it, names of it) of bes fixlets whose (display name of site of it = “test”)

CVE-2011-0657

3406

, 3407

MS11-031: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows XP SP3 - WPOS

(id of it, names of it) of bes fixlets whose (display name of site of it = “test”)

3406

MS11-030: Vulnerability in DNS Resolution Could Allow Remote Code Execution - Windows Server 2008 R2 Gold/SP1 (x64)

3407

MS11-031: Vulnerability in JScript and VBScript Scripting Engines Could Allow Remote Code Execution - JScript 5.8 and VBScript 5.8 - Windows XP SP3 - WPOS

2

(imported comment written by BrianPGreen)

If “cve id lists of it” returns nothing for one of the fixlets, then it will be excluded from the results. I don’t have an environment to try this in as I write this comment, but try something like:

(cve id lists of id|“none”, id of it, name of it) of bes fixlets whose (…)

Alternatively:

((if exists cve id list of it then cve id list of it else “None”), id of it, name of it) of bes fixlets whose (…)

3

(imported comment written by sinucus)

I liked where you were going with this as I tried these myself earlier.

(cve id lists of id|“none”, id of it, name of it) of bes fixlets whose (…) returns

Error: A singular expression is required

((if exists cve id list of it then cve id list of it else “None”), id of it, name of it) of bes fixlets whose (…) on the other hand does produce results… just not the ones I’d like

none

3308

N/A

3310

CVE-2001-0719

3311

CVE-2008-1436; CVE-2009-0078; CVE-2009-0079

3314

I’m still only getting 2 columns. Whenever I include the cve id list call, it eliminates the display name… weird.

4

(imported comment written by VitaliLukyanau)

all looks good, just a little ordered your columns.

(name of site of it, id of it, name of it, (if exists cve id list of it and cve id list of it != “” then cve id list of it else “None”))

of bes fixlets whose (name of it as lowercase contains “test”)

BigFix Labs

1579

Install the latest Endpoint Manager Agent Deployment Application (Windows)

None

BigFix Labs

1580

Install the latest Endpoint Manager Agent Deployment Application (RHEL)

None

5

(imported comment written by sinucus)

Thanks for you help, that works exactly as I wanted. It’s the little things like this with the language that kills me.