Vulnerability Management Prioritization | How to Prioritize Threats | Qualys
Summary: Qualys cites a statistic that almost 30% of CVEs disclosed in 2017 carried a High or Critical CVSS score, roughly 3,000 vulnerabilities or about 58 per week. Forrester analyst Josh Zelonis, citing a 2017 Forrester survey, said 58% of global businesses experienced at least one breach in the prior 12 months and 41% of those breaches came from exploiting a vulnerability, with the Equifax breach traced to the Apache Struts flaw CVE-2017-5638 disclosed about six months earlier.
What you should know: Nearly 3,000 High or Critical CVEs in a single year, about 58 a week, is the volume security teams were expected to triage, and 41% of breached organizations got there through an unpatched vulnerability. Zelonis names the gap directly: security team priorities that are not echoed or understood outside the security team.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-5638
- Related
- CVE-2017-5638: Apache Struts Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021