Starting with v16.0 of Vulnerability Response, for patches that have no solutions after an import, the system then searches for patch IDs in the vulnerability reference data so that you can view these patches on vulnerability records.

Patches without solutions

Role required: sn_vul.vulnerability_admin.

The data imported from the patch orchestration and vulnerability solution applications, as well as patch scanner integrations, are processed, connected, and displayed in the Vulnerability Response application on Patch Update records.

When a solution exists for a vulnerability, related information is correlated in your instance and is rolled up from the patches, to vulnerability solutions, and to the vulnerabilities. To view this information, navigate to All > Vulnerability Response > Patches > All.

After an import, if no vulnerability solution data is available, the Vulnerability solution field on the Patch Update record is left blank. So that you can see the related solution information for these patches, a system property, [sn_vul_patch_orch.no_solution_patch_rollup], is activated by default in your instance. This property searches for Bulletin IDs and Article IDs in the vulnerability reference data from scanner imports. If a match is found, the associated data is populated on the potential patches table, and this information is displayed on the related lists of vulnerability records.

If you have a large number of vulnerabilities, or the rollup scheduled job is taking a long time to complete, you might prefer to deactivate this system property to avoid possible performance issues. However, note that if you deactivate this system property, imported solution data is neither searched for nor rolled up to your vulnerabilities with no solutions.

As a user with the sn_vul.vulnerability_admin role, to deactivate the system property, follow these steps:

  1. Navigate to sys.properties.list.
  2. Locate sn_vul_patch_orch.no_solution_patch_rollup and click it to open the record.
  3. In the Value field, type false.
  4. Click Update.