A new Flexera Community experience is coming on November 25th. Click here for more information.
Your attention is called to this blog post for how SVR and SVM can help you deal with Log4j. SVM focuses exclusively on assessing known vulnerable software versions. It uses file signatures to determine the presence of known vulnerable software versi...
Recently we have published our new SVM practice guide. Our practice guides are designed to walk through how you can get the most out of your products. To grasp a better understanding of how you can utilize SVM to it's fullest potential, view our on-...
Flexera advisory is missing for the below https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-can-inadvertently-display-cleartext-credentials-via-diagnostic-logs-cve-2021-38949/
SA105508 - Doesn't provide any information for Isolation Segment.As per vendor advisory portal - https://tanzu.vmware.com/security , there are 33 advisories released. These ones are not captured by SA105508 USN-5109-1: nginx vulnerabilityUSN-5093-1...
Your attention is called to this blog post for how SVR and SVM can help you deal with Log4j. SVM focuses exclusively on assessing known vulnerable software versions. It uses file signatures to determine the presence of known vulnerable software versi...
Is SAP BusinessObjects BI 4.x (4.1) impacted by apache log4j? If so, please release advisories for it
our clients have been using Forticlient 6.0.0.XXX all this while and it needs to be upgraded to Forticlient VPN only 7.0.1 due to a potential vulnerability.The software vulnerability manager has an update available. However, it requests for a license...
I understand that Flexera SVM currently only scans .exe, .dll, and a few other file types, which unfortunately does not allow it to detect log4j and the recommendation is to follow advice from vendors of each software package. Unfortunately, not eve...
Dear team,we try to cover us for above with SVM. We know RedHat is covered in SVM but nothign on Windows OS.We tried to download their sources but there is only *.jar and non of them have a signed certificate etc.What are our options to find insecure...
Please can you advise whether there is any risk associated with the log4j vulnerability?
Hi,I am wondering if I am the only one having this issue.When I search for a specific host in the 'Completed Scans' view, I get several results.When I open the oldest result using 'View Scan Result' I get the result of the most recent scan.I have tri...
Hi all,I am a newbie with Flexera and I am trying to package Mimecast for Outlook 7.x. Currently this update is highlighted grey in my application list which I know it means that it is not a silent install but the customer would still like this to be...
