To find third-party software vulnerabilities, you can create and run the Find vulnerabilities and required updates task and receive a list of software vulnerabilities. After you obtain the software vulnerabilities list, you can fix the vulnerabilities on the managed devices that are running Windows.
You can fix software vulnerabilities in the operating system and in third-party software, including Microsoft software, by creating and running the Fix vulnerabilities task or the Install required updates and fix vulnerabilities task.
A user interaction may be required when you update a third-party application or fix a vulnerability in a third-party application on a managed device. For example, the user may be prompted to close the third-party application if it is currently open.
As an option, you can create a task to fix software vulnerabilities in the following ways:
As a result, a new task to fix software vulnerabilities is created. As an option, you can add the selected vulnerabilities to an existing task.
The Vulnerability fix wizard is only available under the Vulnerability and patch management license.
The wizard simplifies the creation and configuration of a vulnerability fix task, and allows you to eliminate the creation of redundant tasks.
Fixing software vulnerabilities by using the vulnerability list
To fix software vulnerabilities by using the vulnerability list:
A table with the list of vulnerabilities in the third-party software installed on managed devices is displayed.
If a recommended software update to fix one of the selected vulnerabilities is absent, an informative message is displayed.
To fix some software vulnerabilities, you must accept the End User License Agreement (EULA) for installing the software, if EULA acceptance is requested. If you decline the EULA, the software vulnerability is not fixed.
The New task wizard starts. If you have the Vulnerability and patch management license, the Install required updates and fix vulnerabilities task is preselected. If you do not have the license, the Fix vulnerabilities task is preselected. Follow the steps of the wizard to complete task creation.
Select a task to which you want to add the selected vulnerabilities. If you have the Vulnerability and patch management license, select the Install required updates and fix vulnerabilities task. A new rule to fix the selected vulnerabilities will be automatically added to the selected task. If you do not have the license, select the Fix vulnerabilities task. The selected vulnerabilities are added to the task properties.
The task properties window opens. Click the Save button to save the changes.
If you have chosen to create a task, the task is created and displayed in the task list at Assets (Devices) → Tasks. If you have chosen to add the vulnerabilities to an existing task, the vulnerabilities are saved in the task properties.
To fix the third-party software vulnerabilities, start the Install required updates and fix vulnerabilities task or the Fix vulnerabilities task. If you have created the Fix vulnerabilities task, you must manually specify the software updates listed in the task settings.
Fixing software vulnerabilities by using the Vulnerability fix wizard
The Vulnerability fix wizard is only available under the Vulnerability and patch management license.
To fix software vulnerabilities by using the Vulnerability fix wizard:
A table with a list of vulnerabilities in the third-party software installed on managed devices is displayed.
The button is disabled if you select more than one vulnerability.
The Vulnerability fix wizard starts. The list of existing tasks is displayed. This list may contain the following types of tasks:
You cannot modify the Fix vulnerabilities task to install new updates. To install new updates, you can only use the Install required updates and fix vulnerabilities task.
No further actions are required. You can close the wizard. The task will complete in background mode.
The Add rule button is disabled if you select more than one task.
You cannot add a rule for a Fix vulnerabilities task. If you select a Fix vulnerabilities task, the following notification is displayed: "To install updates, use the "Install required updates and fix vulnerabilities" task."
This rule is displayed only for Microsoft software vulnerabilities.
This rule is displayed only for third-party software vulnerabilities.
This rule is displayed only for third-party software vulnerabilities.
The task properties window opens. The new rule is already added to the task properties. You can view or modify the rule, or other task settings. Click the Save button to save the changes.
This rule is displayed only for Microsoft software vulnerabilities.
This rule is displayed only for third-party software vulnerabilities.
This rule is displayed only for third-party software vulnerabilities.
The new rule that you added in the Vulnerability fix wizard is displayed at the Specify rules for installing updates step of the New task wizard. When you complete the wizard, the Install required updates and fix vulnerabilities task is added to the task list.