Hi everyone,
I’ve noticed that no new CVEs have been loaded into our Risk Monitor since August 13, 2026. A case has been opened, but the resolution is taking quite some time.
Are you seeing something similar on your side?
You can easily verify this by going to the Vulnerability Explorer and sorting the detail list by CVEID in descending order.
Best regards,
Uwe
JeremyTapsell asked a question.
I am looking to add SNOW to our Third party register, to include in our annual 3P Security Assessment schedule, and found the following article about SNOW completing SOC2 examination - https://www.flexera.com/about-us/press-center/snow-software-completes-successful-soc-2-type-2-examination
BUT there is nothing that references this on the Documentation site - https://docs-snow.flexera.com/snow-atlas/user-documentation/security
We purchase SNOW licenses through a third party and it has been frustrating to get anything from them in terms of attestation reports, certificates, or even contacts to Flexera support.
Does anyone here know anything or can provide support?
Many thanks!
Jeremy
Anyone got an answer? Why go to the trouble of getting the SOC 2 report one year, but not the next?
I am a bit confused with the windows build numbers shown in risk monitor...
Just looking at my own laptop risk monitor says I am on 21H2 19044.1387 (Nov 22, 2021!).
In fact KB5021233 was installed last month, and windows system info says I am on 21H2 19044.2364 (Dec 13, 2022)
Thats a big difference which also reflects in a big number of "removable vulnerabilities" (which are not really there).
Can someone help?
BR, Uwe
Apparently, the ideas board is just a place to vent, and no one from Flexera actually *reads* what we ask here.
Right??
sfcook asked a question.
Hello
I’m not sure if this is ideal, but you can use SSO for login in Flexera, and also enable MFA within your SSO setup for added security.
Product Releases Blog — Tijana Miljanovic (Flexera Software)
Pulse 12 versions released on November 6, 2024:
Snow Inventory Agent for Windows 7.2.0
Snow Inventory Agent for Linux 7.1.1
Snow Inventory Agent for Linux 7.0.2
Snow Inventory Agent for MacOS 7.1.1
Snow Integration Manager 6.6.0
Snow Inventory Oracle Scanner 8.5.1
Snow Commander 9.7.1 (RTM on Oct 21)
Risk Monitor 2.9 (RTM on Oct 24)
It's been a while since Inventory Server got any updates. We have several reports from our customer where (and Snow support) stating the 6.9.3 version have known issues. Have those issues been solved? When can we expect an update fixing the known issues?
MB
HubSup asked a question.
I tried to find it in SMACC, but I can't see any option like this.
Best Answer
It is in the SLM SMACC under Basic Settings -
PASSWORD_EXPIRATION_DAYS
Number of days until password expiration. This setting can be overridden for a specific user, by enabling the Password never expires option.
It is in the SLM SMACC under Basic Settings -
PASSWORD_EXPIRATION_DAYS
Number of days until password expiration. This setting can be overridden for a specific user, by enabling the Password never expires option.
MajaHamer asked a question.
Hi,
Our Security team is looking to get list of exclusions which SNOW requires for MS Defender. In toher words : what parts of the application, if any, requires a Defender exclusion to prevent performance issues or other application issues.
Best Answer
I've not seen any interference from MS Defender that impacts performance.
However if you noticed the slow processing of your incoming Inventory Snowpack files then this would be the directory I'd exclude if Task Manager was showing Defender processes with CPU utilisation as being always high:
\\Program Files\Snow Software\Snow Inventory\Server\
You could also look at the Web folder for the SLM installation but as this contains lots of the website code I'd be very reluctant to exclude that from any virus scanning for security reasons.
I concur with Joseph - I have never had to add exclusions for MS Defender for either agents or server components.
Tom
ZakiYoussef asked a question.
Hello folks,
How to change the No. of failed attempts before the SLM Account is locked out? is it available to configure the account to be permanently locked out after No. of failed login attempts to be enabled manually? Also how to change the SLM session time-out settings?
Regards,
Zaki
Best Answer
Hi Zaki,
There is a setting in the web.config file found in C:\Program Files\Snow Software\Snow License Manager\Web that controls the session timeout...
<sessionState timeout="30" />
...value is in minutes.
Regarding the lockout values, there is a USER_LOCKOUT_TIME in SMACC (under Configuration->Basic Settings) that controls the number of minutes a user will be locked out after 3 failed login attempts.
I don't believe there is an option to either control the number of attempts before lockout, nor lock the user out completely.
I'm getting notifications that an appliance is "off-line". The device was removed 5 years ago and there is still portal data related to this environment. Everything related to this environment should have been removed and all data deleted.
typo: ...since August 13, 2025 ...