How fast are new vulnerabilities added to FlexNet Code Insight after discovery?
How fast are new vulnerabilities added to FlexNet Code Insight after discovery?
Summary
This article discusses how fast new vulnerabilities are added to FlexNet Code Insight after discovery?
Synopsis
How fast are new vulnerabilities added to FlexNet Code Insight after discovery?
Discussion
FlexNet Code Insight uses vulnerability data from the NVD and Secunia to advise our customers about risks to known OSS components. This means that as long as a component is listed in our Compliance Library, the weekly electronic update will add the vulnerability details as new vulnerabilities are added to the NVD or a new Secunia advisory is discovered. For this reason we advise customers to ensure that the electronic update is adopted weekly to ensure any new licenses, vulnerabilities and component versions are added to the system.
In addition vulnerability updates delivered via Electronic Updates, Code Insight does live lookups of vulnerabilities against the latest NVD index, ensuring that you always have access to the most current vulnerability information. (applies to both Code Insight v6 and v7)
