Vulnerability Management

CVE stands for ?

• Common Vulnerabilities and Exposures

• Common Vulnerabilities and Entities

• Common Vulnerable and Entities

• Common Vulnerable and Exposures

Which one is the right CVE ID format ?

• CVE prefix + Year + Arbitrary Digits

• CVE prefix + Year + Day

• None

Microsoft releases Monthly regular patches on which day ?

• Second Wednesday

• First Wednesday

• First Tuesday

• Second Tuesday

What is the CVSSv3 Vector for CVE-2021-44228 ?

• CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

• CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

• CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

• CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Log4j2 Vulnerability CVE-2021-44228 fixed in which version(s)?

• 2.15.0

• 2.14.0

• 2.13.0

• 2.9.0

Is there an public exploit available for CVE-2021-44228 ?

• Yes

• No

• Can't Say

CVE-2021-42392 Affects Which product and what Vulnerability?

• H2 Database and RCE

• H2 Database and Buffer Overflow

• SQL Database and RCE

• SQL Database and Buffer Overflow

What is the CVSS Score for the CVSS v3.1 Vector

AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H ?

• 9.8

• 8.8

• 7.8

• 6.8

Which Vulnerability you would like to fix/mitigate first ?

• CVE-2021-42392

• CVE-2022-0100

• CVE-2022-21661

• CVE-2021-46141