AnsweredAssumed Answered

Searching QIDs for Multiple CVEs

Question asked by Chris Norris on Sep 29, 2014
Latest reply on Sep 29, 2014 by Chris Norris

Is there any simple way for me to search all QIDs for the "Shellshock" vulnerability? It doesn't seem like I can search on multiple CVEs which would be nice. I'd just search for CVE-2014-6271 and CVE-2014-6269 and I've have a complete list, but I can't seem to do that. I tried using a comma to separate and it disn't work. When I search on "bash" I get may non related QIDs. Searching on Shellshock didn't work because some of the QIDs like 13038 don't have that term in them.

 

There's got to be a better way of doing this. For now I created a static search list and I keep manually updating it. This is a pretty common use case where similar CVEs come about and an enterprise would want to cover them all in a scan or report.

Outcomes