Vulnerabilities
Purpose
Section titled “Purpose”Synchronize CVE feeds (NVD, CISA, MITRE), match against assets/software, and track remediation in Vulnerabilities module.
Key components
Section titled “Key components”| Layer | Path |
|---|---|
| Backend | Backend/internal/domain/vulnerabilities/ |
| CVE sync jobs | Background fetch from external APIs |
| Frontend | Vulnerabilities UI |
Flow: CVE sync
Section titled “Flow: CVE sync”sequenceDiagram
participant Job as CVE sync job
participant NVD as NVD/CISA APIs
participant DB as Azure SQL
participant API as Cloud Backend
Job->>NVD: Fetch feed updates
Job->>DB: Upsert CVE records
API->>DB: Match CVEs to asset software (on read/scan)
See also domain flow — CVE sync.
Debug scenarios
Section titled “Debug scenarios”| Issue | Check |
|---|---|
| Stale CVE data | Job schedule; API key NVD_API_KEY |
| No matches on asset | Software normalization; CPE gaps (Host Agent CPE → TODO.md) |