Ivanti Neurons for Vulnerability Knowledge Base
Speed up vulnerability assessments and prioritization
with near-real-time vulnerability threat intelligenceivanti.com

The scanners security teams use present a similar
Ivanti Neurons for Vulnerability Knowledge

issue. These tools only provide information on

Base arms security experts with authoritative

vulnerabilities and weaknesses after they have been

and immediate vulnerability threat intelligence

discovered, cataloged, entered into the tool and thenplus risk-based scoring of vulnerabilities based

scanned for. This process can take anywhere fromon real-world threat information so they canminutes to months past when that information isanalyze and assess the effect of a vulnerability

needed.

on their organization and quickly pivot toIntroducing Ivanti Neurons
for VULN KB
Ivanti Neurons for Vulnerability Knowledge Base(VULN KB) provides pen testers, red teamers, security
analysts and other security experts with the nearreal-time vulnerability threat intelligence they need to
speed up vulnerability assessments and prioritization.

Scanners have other gaps as well. For instance, aEasy access to research from the highest fidelity

comparison of three of the most popular scanners

sources and industry-leading exploit writers enables

found that the best of the bunch could only detect

those experts to quickly pivot from analyzing and

77% of ransomware vulnerabilities. Additionally, evenassessing the effect of a vulnerability on their

Vulnerabilities require afaster response

the best scanner will only contain information onorganization to planning mitigation and remediation

vulnerabilities and weaknesses that are found withinstrategies. Risk-based scoring of vulnerabilities thatSeventy-four percent of organizations take a day or

an organization’s environment, offering no insightis constantly updated based on real-world threat

into those vulnerabilities and weaknesses that haveinformation aids them in their efforts.

planning mitigation and remediation strategies.

3

longer to mitigate or remediate critical vulnerabilities.1
In an age where 42% of known exploited Common
Vulnerabilities and Exposures (CVEs) are being usedevaded detection or may not yet be present in theorganization’s environment.

by cyber adversaries on day zero of disclosure in

The ability for an organization to respond tothe National Vulnerability Database (NVD), thesevulnerabilities is often further delayed by the needorganizations leave themselves open to significant

for security practitioners to correlate the informationrisk.

from scanners with information from online searches

2

Multiple factors commonly prohibit organizations
from staging a faster response to vulnerabilities. Forstarters, there is often significant latency between thetime a vendor publishes a vulnerability and the timeand other manual methods of research. Additionally,
manual research efforts are only effective if theinformation they are targeting is available andaccurate.

of NVD disclosure. For example, in 2021, that latency
equaled an average of 13.7 days for ransomware
vulnerabilities.3

Ivanti Neurons for Vulnerability Knowledge Base | DATASHEET

2Key capabilities

Speed up mean time to mitigate

Gain a global view of CVEs and CWEs

Create informed plans based on threat context
to mitigate risk exposure from vulnerabilities andAccess detailed information on all vulnerabilities

weaknesses without having to wait for scan findings.

(CVEs) and weaknesses (CWEs), not just those

Ivanti Neurons for VULN KB provides immediate

identified by your scanners. Ivanti Neurons for VULN

access to detailed information on all known CVEs andKB enables you to increase your knowledge of theCWEs, even those CVEs coming from CVE Numbering

security landscape and understand what’s going

Authorities (CNAs) before they are officially scored byon globally – for example, which vulnerabilities arethe NVD. Additionally, VRR scores within the platform

trending. Knowing what a threat can do to yourare constantly updated based on real-world threatorganization’s critical systems can help you better

information to ensure security and IT teams always

protect those systems from cyber attacks.

have a current perspective of the cyber risks theirorganization faces.
on actual exploitability. Ivanti Neurons for VULN KB puts
an automated and expert-led collection of authoritative
vulnerability threat intelligence at your fingertips. Its
intelligence comes from the highest fidelity sources
and industry-leading exploit writers.
The platform includes all perspectives ofvulnerability risk:■ CVE and CWE NVD details.
■ Identified remote code execution (RCE) andprivilege escalation (PE) capabilities.

Perform in-depth vulnerability assessments
and prioritization
Find all the information you need about any■ Weaponized exploits and malware.
■ Associated exploits trending in the wild.
■ Ties to ransomware variants.

vulnerability or weakness in one location to help you■ Association with APT groups.

identify the greatest risks to your organization based■ Ivanti Vulnerability Risk Rating (VRR).

Ivanti Neurons for Vulnerability Knowledge Base | DATASHEET

3Features & functions
FeatureDiverse data sourcesVulnerability KB dashboard

Vulnerabilities list view
Weaknesses list view
Vulnerability Risk Rating (VRR)

Alerts and notifications

Function
Achieve a wide view of cyber risk with a platform that ingests vulnerability findings from over 100 independent sources plus
manual findings from research and pen testing teams.
Leverage insightful visualizations on vulnerabilities and weaknesses, including their threat context, to improve vulnerability
management processes.
Find detailed information on all known vulnerabilities in the Ivanti database, plus all associated threat data, such as trending,ransomware, exploits and more.
Access a full list of available software weaknesses as defined by MITRE plus detailed information on each.
Quickly determine the risk posed by a vulnerability with numerical risk scores that consider the intrinsic attributes of thevulnerability plus its real-world threat context.
Gain instant awareness of pertinent events via near-real-time alerts sent from the platform’s notification engine. Similarly, direct
other users to important information within the platform with deep links.

Ivanti Neurons for Vulnerability Knowledge Base | DATASHEET

4About Ivanti
Ivanti elevates and secures Everywhere Work sothat people and organizations can thrive. We maketechnology work for people, not the other way around.
Today’s employees use a wide range of corporate andpersonal devices to access IT applications and dataover multiple networks to stay productive, wherever

For more information, or to contact Ivanti,
please visit ivanti.com.

and however they work. Ivanti is the only technology
company that finds, manages and protects every IT
asset and endpoint in an organization. Over 40,000
customers, including 85 of the Fortune 100, havechosen Ivanti to help them deliver an excellent digital
employee experience and improve IT and security
team productivity and efficiency. At Ivanti, we strive
to create an environment where all perspectives areheard, respected and valued and are committed to amore sustainable future for our customers, partners,
employees and the planet. For more information,visit ivanti.com.

1.

Copyright © 2024, Ivanti. All rights reserved. IVI-2675 07/24 WG/NH

ExtraHop, “Cyber Confidence Index 2022”, 1 March 2022.
https://www.extrahop.com/resources/papers/cyberconfidence-index-2022/
2. Cybersecurity and Infrastructure Security Agency (CISA),“Binding Operational Directive 22-01: Reducing theSignificant Risk of Known Exploited Vulnerabilities”, 3November 2021. https://cyber.dhs.gov/bod/22-01/
3. Cyber Security Works, Cyware, Ivanti, “2022 Ransomware
Spotlight Report”, 26 January 2022. https://www.ivanti.
com/lp/security/reports/ransomware-spotlight-year-end2021-report