How Panorays detects CVEs
During each scan, Panorays identifies the technologies and versions a supplier uses on its external assets. Then it matches them against known vulnerabilities (CVEs). If a supplier runs a vulnerable version, the CVE appears as a finding on that supplier and in your Technology Center dashboard.
Note: A newly published CVE is attached to a supplier only after that supplier’s next scan. If a CVE was published in the last day or two, the list of affected suppliers will keep growing as rescans finish. Check back later for the full picture.
Open the application and navigate to the live dashboard.
In the live dashboard, select the Technology Center report.
Click on the Dashboard filters.
Search for the relevant CVE and select it.
Click the 'Apply' button.
Scroll down till you reach the 'supplier impacted by the CVE' section.
What to do next
Once you know which suppliers are affected:
Prioritize by how critical each supplier is to your business.
Reach out with a short, targeted questionnaire, for example: Are you affected? Have you patched? Have you seen signs of compromise?
Need help? Contact your Customer Success Manager. We can help you pull your data and choose the right questionnaire.