Opened Console > Home > Patch Management; under Windows > Compliance and Remediation > Compliance by Update; set the Category dropdown parameter to All: Confirmed ndp20sp2-KB4014580-x86-xp.exe was listed.
Found when setting the Category dropdown parameter to Security Update; the listing for targeted updates is no longer present for ndp20sp2-KB4014580-x86-xp.exe.
Reviewed Microsoft Catalog: Confirmed the status of this .NET Update being deployed in MS17-NET-04 is categorized as a Security Update.
Set category for the Software Bulletin deploying the .NET Software Update failed to account on the individual Software Update category.
This issue was resolved in PMImport 7.2.35 for retroactive Software Bulletins like MS17-NET-04 as it housed both Security & Non-Security Software Updates which labeled them all the same. Ensure the Import Patch Data for Windows is currently showing this version downloaded successfully and MS17-NET-04 will display accurately for the individual Software Updates.
This issue was resolved in PMImport 7.2.28 released on 5/10/17 moving forward, for the .NET Software Bulletins have been separated to reflect the accurate Severity and Category. Ensure the Import Patch Data for Windows is currently showing this version downloaded successfully and the updated details for .NET deployments as follows:
Note: This naming scheme for current Bulletin deployment is detailed on INFO4140.