Potential False Positive Vulnerabilities Show Blank RE:

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Workload

Issue/Introduction

When looking at the vulnerabilities some may not be applicable but show no resource RE:

Environment

Carbon Black Cloud: All Supported Versions

Cause

This can occur if the CVE shows no Article or Download for the NIST Vulnerabilities Data to populate and compare against causing potential false positives in the vulnerability scanner

Resolution

If the vulnerability is false positive it can be dismissed as mentioned here

Additional Information

If the fix for a vulnerability is to make changes that don't involve an update and the resource is blank it will need to be dismissed manually