Fixing a vulnerability

You can fix a vulnerability by installing an operating system update, changing the application configuration, or installing an application patch.

Detected vulnerabilities may apply not to installed applications but to their copies. A patch can fix a vulnerability only if the application is installed.

To fix a vulnerability:

1. Open the main application window.
2. In the upper part of the main application window, click the Quarantine link to open the Storages window.
3. In the Storages window, select the Vulnerabilities tab.

   The Vulnerabilities tab contains a list of vulnerabilities that Kaspersky Endpoint Security has detected during the Vulnerability Scan task.

4. In the list of vulnerabilities, select the entry that corresponds to the relevant vulnerability.

   A section with information about this vulnerability and recommendations on how to fix it opens at the bottom of the list of vulnerabilities.

   The following information is available for each selected vulnerability:

   • Name of application in which the vulnerability is detected.
   • Version of application in which the vulnerability is detected.
   • Severity level of a vulnerability.
   • Vulnerability ID.
   • Date and time of last vulnerability detection.
   • Recommendations on fixing the vulnerability (for example, a link to a website with an operating system update or an application patch).
   • Link to a website with a description of the vulnerability.
5. To view a detailed description of the vulnerability, click the Additional information link to open a web page with a description of the threat that is associated with the selected vulnerability. The website www.secunia.com lets you download the necessary update for the current version of the application and install it.
6. Select one of the following ways to fix a vulnerability:
   • If one or more patches are available for the application, install the necessary patch by following the instructions that are provided next to the name of the patch.
   • If an operating system update is available, install the necessary update by following the instructions that are provided next to the name of the update.

   The vulnerability is fixed after you install the patch or update. Kaspersky Endpoint Security assigns this vulnerability a status that signifies that the vulnerability is fixed. The entry about the fixed vulnerability is shown in gray in the list of vulnerabilities.

7. If no information on how to fix a vulnerability is provided in the lower part of the window, you can start the Vulnerability Scan task again after updating Kaspersky Endpoint Security databases and modules. Because Kaspersky Endpoint Security scans the system for vulnerabilities against a database of vulnerabilities, an entry about a fixed vulnerability may appear after the application is updated.