Topic
This article describes how to view vulnerability data within NinjaOne and identify recommended actions.
Environment
- NinjaOne Integrations
- NinjaOne Vulnerability Management
Description
Vulnerability Management for networks and systems is a critical component of an organization's overall cybersecurity strategy, helping to protect assets and data from potential breaches and attacks.
The NinjaOne Vulnerability Management application helps you identify, assess, and remediate known Common Vulnerabilities and Exposures (CVEs) on managed endpoints.
Select a topic to learn more:
- System Requirements
- How to Activate the Vulnerability Management Features
- Find Vulnerability Data on the Dashboards
- Additional Resources
System Requirements
Currently, the vulnerability tools work with the following operating systems:
- NinjaOne Patch: Microsoft Windows and Apple macOS
- Real-Time Software Assessment: Microsoft Windows
How to Activate Vulnerability Management Features
Access the application from Administration → Apps → Installed. Select the NinjaOne Vulnerability Management application and activate it.
General Tab
On the General tab, click Edit for each option to configure whether data should be visible in the Vulnerabilities tab on the dashboards or whether they should impact device health status.
- Status is Enabled: Refer to the section of this article titled Dashboard Vulnerabilities Tab to learn about how NinjaOne presents this data.
- Impact device health is Yes. Refer to the section of this article titled Dashboard Health Status to learn about how NinjaOne presents this data.
Refer to the following table for a description of each section.
| Vulnerability Management Section Name | Definition or Purpose |
|---|---|
| NinjaOne Patch | Configure the behavior of CVEs identified by NinjaOne Patch scanning. |
| Real-Time Software Assessment | Configure the behavior of CVEs identified by the NinjaOne Real-Time Software Assessment. As software on devices changes, the associated Common Vulnerabilities and Exposures (CVEs) update automatically, with no additional load time or impact on endpoints. |
Organizations Tab
From the Organizations tab, you can activate or deactivate Real-Time Software Assessment per organization. This adds options directly in each organization.
You can click the checkbox next to an organization name to select it, and then click the Enable or Disable to activate or deactivate Real-Time Vulnerability Assessment for the organizations you selected.
NinjaOne will display a dialog where you can confirm your selection.
Find Vulnerability Data on the Dashboards
You can view vulnerabilities from several locations on the system, organization, or device dashboards, including:
Dashboard Vulnerabilities Tab
The Vulnerabilities tab is available on the system, organization, and device-level dashboards.
You can view your vulnerability data by clicking the drop-down menu next to the Vulnerabilities menu heading and selecting either Overview or CVE. Each page presents a different view of the data.
Overview Page
The Overview page presents an at-a-glance view of your vulnerability data, including:
- Total vulnerabilities
- Top 10: Vulnerabilities by device count
- Top 10: Impacted Device Roles
- Top 10: Devices by vulnerability count
CVE Page
The CVE page groups data by CVE, with each row in the table representing a single CVE and its related devices. This data is filtered by the set of devices visible to the user accessing the data, so the dashboard only contains counts of visible devices.
Refer to NinjaOne Vulnerability Management: Common Vulnerabilities and Exposure (CVE) Data to learn more about the Vulnerabilities tab.
Dashboard Health Status
Move your mouse cursor over icons next to the organization name on the system dashboard to view the number of devices affected by vulnerabilities and their risk levels. Click the hyperlink to navigate to the Devices search page with the Vulnerabilities filter applied.
Click the numbered links in the Device health issues widget on the system or organization dashboard to view vulnerability details. You will navigate to the Devices search page, which NinjaOne filters to show the affected devices; from there, you can perform various device actions. Refer to our Find and Manage Endpoints from the Devices Search Pages article to learn more.
Dashboard Activities Tab
From the system, organization, or device dashboard, open the Activities tab and select All.
Select Vulnerability from the Activity type drop-down menu and then select an option from the Status drop-down menu to organize the data.
Additional Resources
Refer to the following resources to learn more about vulnerabilities and patching in NinjaOne: