Vulnerability - Severity, Base Score, Dates, and more are empty

Usage and Config Security
1

Good morning team,
When entering the Vulnerability report, in most cases the Severity, Base Score, Dates, and several other columns are empty.

image
image1290×490 42.4 KB

However, when we access the NVD link for the vulnerability, data is present.

For example:

https://nvd.nist.gov/vuln/detail/CVE-2013-3900

https://nvd.nist.gov/vuln/detail/CVE-2024-30101

This happens with both old and new vulnerabilities!

image
image1293×415 36.9 KB

https://nvd.nist.gov/vuln/detail/CVE-2026-20806

Do I need to activate any analyses?
What do you recommend?

2

Make sure to read the Note under Fixlet 1005 - Download NVD CVE Data Files in the SCM Reporting site can be used to download and cache the current and previous year's data files.

You need to download the files into a specific place on the Compliance Server, and after the Import the data will be propagated.
This data is updated regulary so the process should be repeated

1 Like