This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Platform Online Documentation
Browse the official NetWitness Platform Online documentation for helpful tutorials, step-by-step instructions, and other valuable resources.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Versions
Collections
All Downloads

Table of Contents

Product Resources

NetWitness Service Level Objective (SLO) and Common Vulnerabilities and Exposures (CVE)

The Service Level Objective for Common Vulnerabilities and Exposures (CVE) are listed in this section.

NetWitness shall use commercially reasonable efforts to roll out a fix within the period specified:

 

CVE Status Duration
Critical 30 days
Major 60 days
Moderate 120 days
Minor 120 days

 

 

About CVE Score and NetWitness Score

 

You can learn how NetWitness Product Security Team uses a new internal vulnerability scoring method called NWSS (NetWitness Security Score). Using NWSS, the NetWitness Product Security team assesses the vulnerability's actual severity score defined within the scope of NetWitness.
NWSS is calculated based on the CVSS 3.1 scoring system. These details are being tracked in corporate defect tracking system (Jira).
Scoring is based on CVE score and NWSS (NetWitness Score):

 

  • Score > = 9.0 = Critical
  • Score > = 7.0 & < = 8.9 = Major
  • Score > = 4.0 & < = 6.9 = Moderate
  • Score < = 3.9 = Minor

 

Labels (1)
Labels:
0 Likes
Was this article helpful? Yes No
No ratings

On this page

© 2022 RSA Security LLC or its affiliates. All rights reserved.