Vulnerabilities¶

SentriKat tracks CISA Known Exploited Vulnerabilities (KEV) and matches them against your software inventory.

Viewing Vulnerabilities¶

All Vulnerabilities¶

Go to Vulnerabilities to see all KEV entries:

• Filter by severity, due date, ransomware status
• Search by CVE ID or description
• Sort by various columns

Matched Vulnerabilities¶

The Dashboard shows vulnerabilities that match your products.

Vulnerability Details¶

Click any CVE to view:

• CVE ID: Unique identifier
• Description: What the vulnerability does
• Vendor/Product: Affected software
• CVSS Score: Severity rating (0-10)
• EPSS Score: Exploit prediction (0-1)
• Due Date: CISA remediation deadline
• Ransomware: Known ransomware association
• Affected Products: Your matched products

Priority Calculation¶

SentriKat calculates priority based on:

if ransomware_flag:
    priority = "Critical"
elif due_date <= 7_days:
    priority = "Critical"
elif cvss >= 9.0 or due_date <= 30_days:
    priority = "High"
elif cvss >= 7.0:
    priority = "Medium"
else:
    priority = "Low"

Acknowledging Vulnerabilities¶

When you've addressed a vulnerability:

Single Acknowledgment¶

1. Click the vulnerability
2. Click Acknowledge
3. (Optional) Add a note
4. Save

Bulk Acknowledge by CVE¶

Acknowledge all matches for a CVE:

1. Click Acknowledge by CVE
2. Select CVE
3. Confirm

Auto-Acknowledgment¶

Configure automatic acknowledgment:

1. Go to Settings → Auto-Acknowledge
2. Set rules:
3. By product version (patched versions)
4. By organization
5. By age threshold

Snoozing¶

Temporarily hide a vulnerability:

1. Click Snooze
2. Select duration (1-90 days)
3. (Optional) Add reason
4. Confirm

Snoozed vulnerabilities: - Don't appear in dashboard counts - Don't trigger alerts - Reappear after snooze expires

EPSS Scoring¶

The Exploit Prediction Scoring System (EPSS) predicts likelihood of exploitation:

Sync Status¶

Check KEV sync status:

1. Go to Admin → Settings
2. View Last Sync timestamp
3. View Sync History for details

Trigger manual sync:

curl -X POST http://localhost:5000/api/sync \
  -H "Authorization: Bearer YOUR_TOKEN"

Export¶

Export vulnerability data:

1. Apply filters
2. Click Export
3. Choose format (CSV, JSON, PDF)

API Access¶

Query vulnerabilities via API:

# Get all vulnerabilities
curl http://localhost:5000/api/vulnerabilities \
  -H "Authorization: Bearer YOUR_TOKEN"

# Get statistics
curl http://localhost:5000/api/vulnerabilities/stats \
  -H "Authorization: Bearer YOUR_TOKEN"

See API Reference for details.