Vulnerability Management
Atatus lists the vulnerable packages installed on your hosts and containers, with each CVE's severity score, EPSS exploit probability and fix, and tracks how long every finding stayed open.
One list, three ways to read it.
Regroup the same findings by vulnerability, package or resource.
| Severity | Vulnerability | Resource |
|---|---|---|
| High7.8 | Program run via pkexec can escape to the parent session | atatus-client |
| High7.5 | Negative repeat value in pcre2test leads to an infinite loopExploit available | atatus-client |
| High7.5 | Negative repeat value in pcre2test leads to an infinite loopExploit available | web-01 |
| High7.5 | Negative repeat value in pcre2test leads to an infinite loopExploit available | api-7d9f |
| High7.5 | Component with known vulnerabilityExploit available | atatus-client |
| High7.5 | Component with known vulnerabilityExploit available | web-01 |
| High7.5 | Component with known vulnerabilityExploit available | db-01 |
| High7.5 | Component with known vulnerabilityExploit available | api-7d9f |
| High7.5 | OP_KETRMAX feature in the match function | atatus-client |
| High7.5 | OP_KETRMAX feature in the match function | web-01 |
| High7.5 | Regular expression denial of service via malicious header | atatus-client |
| High7.8 | sudoedit can edit files outside the allowed listExploit available | web-01 |
| High7.8 | sudoedit can edit files outside the allowed listExploit available | db-01 |
| High7.5 | X.509 email address buffer overflow | db-01 |
| High7.5 | X.509 email address variable length buffer overflow | db-01 |
| Critical9.8 | Heap buffer overflow in inflate with a large gzip header extra field | api-7d9f |
| Low3.7 | Cookie injection with none file | web-01 |
| Low3.7 | Cookie injection with none file | api-7d9f |
Fix what attackers will use first.
Set your own severity and EPSS thresholds. The corner is your fix-first list.
Fix first 6
sudoedit can edit files outside the allowed list
- Package
- sudo 1.9.9
- CVE
- CVE-2023-22809
- EPSS
- 1.9% (88th percentile)
- Remediation
- Fixed upstream in 1.9.12p2
Know how long you were exposed.
From the day a CVE was published to the last time Atatus saw it on your host.
No remediation found
Real values from the finding in the product screenshot.
One finding, every detail.
A real host package finding from the Atatus app.
Powering better performance for modern teams
"Solid Product even better support." The integration path is incredibly simple/easy and the overall interface is very intuitive. That said, I had a handful of odd use cases that the support team was incredibly responsive in helping me work through.
Questions about vulnerability management
Pricing, deployment, data and the agent. If something is missing, a person will answer it on a demo call.
In Atatus, vulnerability management lists the packages installed on your hosts and containers that have known CVEs. Each finding shows the CVE's severity score, its EPSS exploit probability, the fix if one exists, and how long the finding has been open.
Each finding shows its severity score, its EPSS score and percentile, which estimate how likely it is to be exploited, and an Exploit available badge when an exploit is known. Filter by severity, fix availability and exploit availability to build your own fix-first list.
Vulnerability management covers operating system packages on your hosts and containers, such as deb packages on Ubuntu, matched to published CVEs. For open source libraries inside your Node.js, Python and PHP services, see Application Security.
Every finding records when the CVE was published, when Atatus first detected it, when it last detected it, and the window of exposure between first and last detection.
Yes. Findings are split into Open and Auto-Closed tabs, and each finding shows its remediation, or No remediation found when there is none yet. You can view the list by unique vulnerability, by package or by resource to see which hosts and containers still carry a CVE.
Hosts and containers. The High Risk Resources count shows both, and the Resources view lists each host or container with its operating system and its vulnerable packages.
Rank host and container package vulnerabilities by severity and exploit likelihood, and see how long you were exposed.
- SaaS
- On-premises
- Hybrid
- BYOC
- No per-user pricing
Compare Atatus with Datadog