Loading

Snow Risk Monitor

Skip Feed
  1. Hi everyone,

    I’ve noticed that no new CVEs have been loaded into our Risk Monitor since August 13, 2026. A case has been opened, but the resolution is taking quite some time.

    Are you seeing something similar on your side?

    You can easily verify this by going to the Vulnerability Explorer and sorting the detail list by CVEID in descending order.

    Best regards,

    Uwe

     

    Expand Post


    • It's been a while since Inventory Server got any updates. We have several reports from our customer where (and Snow support) stating the 6.9.3 version have known issues. Have those issues been solved? When can we expect an update fixing the known issues?

       

      MB

      Expand Post

  2. Snow Extender

    Release date: Jun 19, 2024

     

    • Custom Encryption Keys support in Snow Extender

    We are excited to introduce the support for custom encryption keys in Snow Extender. This highly-requested feature empowers customers to enhance data security by securely transferring snowpack data from the Snow Inventory Agents to Snow Atlas and Risk Monitor using their own custom encryption keys. With this capability, customers can ensure the utmost security and confidentiality of their data throughout the data transfer process.

     

     

    • Enhanced communication handling

    We have improved the communication flow between Snow Atlas, Snow Extender, and Snow Inventory Agents. Specifically, the error handling has been enhanced to ensure proper forwarding of failed HTTP messages and status codes back to the agents.

    This enhancement equips the agents to effectively diagnose issues with requests made to Snow Atlas, facilitating a smooth operation and troubleshooting.

     

     

    • Enhancement of the DLL loading mechanisms

    The Snow Extender configurator now employs enhanced mechanisms to load Dynamic Link Libraries (DLLs), effectively mitigating potential DLL preloading attacks.

     

    • Enhancement of the DLL hijacking prevention mechanisms

    We have strengthened the Dynamic Link Libraries (DLLs) loading mechanism within the Snow Extender Service to mitigate DLL preloading attacks. This proactive enhancement safeguards against potential security vulnerabilities, ensuring the integrity and reliability of the application.

     

     

     

     

     

    Expand Post

  3. Is the Risk Monitor product worth buying?

    We are looking into vulnerabilities and how Risk Monitor can help us in this area. Is this worth the cost? Does it give you what is expected?

     

    And with the Flexera and SNOW merge/purchase (whatever) is this still a good path forward for this technology?


    • Risk Monitor is useful if you have a dedicated InfoSec team who can analyse and understand the data coming from it and determine what you need to do with the information.

      If you don't then there are more focused products are out there that better serve Infosec requirements allowing you to say grade vulnerabilities not just by CVE score but applicability to your environments and business risk areas/priorities.

      Expand Post

  4. Official Release of Snow Agent Script for Windows update details for Snow Risk Monitor 1.0.0

    Released on March 6, 2024

     

    Release information

    Product: Snow Agent Script for Windows update details for Risk Monitor 1.0.0

    Release date: Mar 6, 2024

    Distribution: Download link here or available via Agent packages ordered by support

    Current status: Released

     

    Please find more about the content of this release in the Release notes

    Expand Post

End of Feed
8 Chatter Feed Items
ALL CONVERSATIONS
UNSOLVED
ARTICLES
32 Posts
23 Articles
Loading
Snow Risk Monitor | Flexera