View mobile OS vulnerabilities

You can view a list of the Common Vulnerabilities and Exposures (CVE), as identified, defined, and tracked by the National Vulnerability Database, for Android and iOS devices that are used in your organization’s environment. For each OS version, you can view the number of devices that use that version, the total CVE count for that OS version, the risk classification and brief description of each CVE, and a link to view full details in the National Vulnerability Database.

UEM checks and updates the CVE data for all devices in your environment the day after a UEM upgrade, and every 15 days. If users perform actions to resolve CVE issues on devices (for example, upgrading their OS), or actions to increase the count of CVE issues, the updated CVE data will not be reflected in the device vulnerabilities view and your CVE search results until UEM checks and updates the data.

Note that when a new device is activated on UEM, the CVE data related to that specific device is reflected in the device vulnerabilities view and in CVE search results within 15 minutes.

  1. In the management console, on the menu bar, click Users > Device vulnerabilities.
  2. Do any of the following:

    Task

    Steps

    Search for specific CVE results.

    In the search field, specify the search criteria. When you search for a specific CVE number, you can see the device operating systems that are impacted by that CVE.

    Select the data that you want to view.

    Click The Options icon. and select the desired columns.

    Sort the data.

    Click a column to sort the data in ascending or descending order.

    Apply filters to the data.
    1. Expand Filters and select the filter criteria.
    2. Click Submit.

    View CVE details.
    1. Click a link under a CVE severity column (Critical, High, Medium, Low) to view a list of the specific CVEs for an OS version, or click a link under the Total CVE column to view a list of all the vulnerabilities for an OS version.
    2. In the CVE column, click a link to view details in the National Vulnerabilities Database.

    View the details for affected devices.

    Click a link under the Affected devices column.

    The filters are set to view the affected devices only.

    Export the data to a CSV file.

    Click The Export icon..