Skip to main content
The common use is a CVE named in a ticket or a chat: the agent reads its scores, KEV status, affected versions and fix from OpenCVE, then checks the client’s devices and software in your RMM, network monitor and documentation for an affected version.
Automatically enabled when you configure OpenCVE permissions in your agent workflow.

​
What It Does

  • Look up a CVE: CVSS 2.0 to 4.0 scores with their provider, EPSS, CISA KEV status and due date, SSVC, affected vendors, products and version ranges, weaknesses, references and dates
  • Search CVEs by vendor, product, score, EPSS, KEV status, keyword and date
  • Read vendors, products, CWE weaknesses and a CVE’s change history
  • Check a CVE’s affected versions against a client’s software and devices, through the agent’s RMM, Auvik, IT Glue and PSA tools
  • Read a project’s subscriptions, CVEs and reports, and set a CVE’s triage status and assignee
  • Read and change projects, subscriptions, notifications, automations and members

​
Permission Groups

​
Setup

See Connecting OpenCVE to Neo.