6 docs tagged with "vulnerabilidades"

Responsibilities of the AppSec Engineer in the SbD-ToE

Analysis of how SbD-ToE supports the technical core of the Cyber Resilience Act in the context of products with digital elements, with explicit conformity boundaries

Identification and technical analysis of vulnerabilities in containers as a risk signal, not as an automatic decision

Examples of how to implement toolchain principles with different tools

Process for triaging, prioritising, tracking and resolving vulnerabilities detected in security testing.

Remediation prioritisation layer based on the probability of exploitation (EPSS, FIRST.org) and confirmed exploitation (CISA KEV), applied on top of the CVSS-based patching SLAs. EPSS and KEV refine the order of remediation; the SLAs by severity remain as the mandatory floor.