CyberWatch | Enterprise Vulnerability Intelligence Platform

Vulnerability Overview

Live Threat Status & Exposure Telemetry

Snapshot: 2026-10-12 7 CISA KEV Active

Critical KEV

Weaponized

Immediate Action

High Risk

Severe Exposure

CVSS Base 7.0 - 8.9

Fleet Nodes

6 Business Units

Active Monitoring

Scan Decay

>30 Days Stale

Unquantified Risk

Enterprise Global Vulnerability Exposure Map

Active CISA KEV High Exposure Baseline

* Pan or click on target beacons to inspect localized node attribution Global Telemetry Grid Active

ACTIVE VULNERABILITIES +5% WoW

190

RISK SCORE GAUGE

68 / 100

High Exposure Level

HIGH

OPEN CRITICALS

7 NODES

Active in CISA KEV

MEAN TIME TO REMEDIATE

4.2 DAYS

Target SLA: 7 Days

Live Cyber Intel Feed

CISA KEV ALERT

CVE-2021-44228 Active Ingress

Mass scanning detected targeting financial database node (FIN-SRV-002).

PERIMETER BREACH ATTEMPT

CVE-2022-40684 FortiOS Bypass

Exploit attempt against administrative interface at OPS-NET-003.

SCAN HYGIENE WARNING

211-Day Scan Blindspot

Core switch OPS-NET-002 has decayed past audit tolerance.

Top 5 Monday Morning Patching Targets

ASSET	SOFTWARE / CVE	SEVERITY	HYGIENE	SCORE
FIN-SRV-002 Finance DB	log4j-core 2.14.0 CVE-2021-44228	CRITICAL	150d stale	100.0
IT-SRV-002 Mail Server	Exchange 15.1.2375.7 CVE-2021-34473	CRITICAL	129d stale	97.2
OPS-NET-003 Perimeter VPN	Fortinet FortiOS 6.4.5 CVE-2022-40684	CRITICAL	Current	95.6
FIN-SRV-001 Finance App	Apache HTTP 2.4.49 CVE-2021-41773	CRITICAL	Current	93.8
ENG-SRV-001 Build Runner	log4j-core 2.14.1 CVE-2021-44228	HIGH	Current	90.0

Full Fleet Vulnerability Ledger

Deterministic CVSS × Criticality × Threat Ingestion Matrix

ASSET ID	DEPARTMENT	SOFTWARE PACKAGE	CVE IDENTIFIER	CVSS	CISA KEV	AUDIT AGE	COMPOSITE RISK

CISA Known Exploited Vulnerabilities (KEV) Catalog

Binding Operational Directive (BOD 22-01) Remediation Due Dates

7 Confirmed Active Weaponizations

Log4Shell Exposure

CVE-2021-44228

Affects FIN-SRV-002 & ENG-SRV-001. Allows unauthenticated RCE via JNDI injection.

Action: Patch to log4j-core >= 2.17.1

ProxyShell Rollup

CVE-2021-34473

Affects IT-SRV-002 (Exchange Mail Server). Remote Code Execution via pre-auth path confusion.

Action: Apply Microsoft Exchange CU

FortiOS Auth Bypass

CVE-2022-40684

Affects OPS-NET-003. Perimeter VPN administrative interface bypass via crafted HTTP request.

Action: Upgrade FortiOS firmware

Active In-Fleet Weaponized Systems

FIN-SRV-002 | log4j-core 2.14.0 | CVE-2021-44228

CISA Due Date: 2021-12-24 (Severely overdue / 150d scan decay)

IT-SRV-002 | Exchange Server 15.1.2375.7 | CVE-2021-34473

CISA Due Date: 2021-10-20 (Overdue / 129d scan decay)

OPS-NET-003 | Fortinet FortiOS 6.4.5 | CVE-2022-40684

CISA Due Date: 2022-11-01 (Perimeter Gateway Exposure)

Enterprise Asset Telemetry Fleet

23 Nodes Distributed Across 6 Operating Business Units

Total: 23 Nodes

FINANCE

4 Nodes

ENGINEERING

5 Nodes

OPERATIONS

5 Nodes

IT INFRA

4 Nodes

HR CORP

3 Nodes

EXECUTIVE

2 Nodes

NODE ID	HOSTNAME	INTERNAL IP	BUSINESS UNIT	CRITICALITY	ACTIVE SERVICE	TELEMETRY ACTION

Vulnerability Scan Hygiene & Decay Audit

SLA Threshold: 30 Days. Stale Scans Introduce Latent Risk Blindspots.

7 Nodes Violating 30-Day SLA

OLDEST AUDIT BLINDSPOT

211 Days Stale

OPS-NET-002 (Cisco Switch)

AVG DECAY INTERVAL

162 Days

Across stale cluster

CURRENT NODES (SLA MET)

16 Nodes (70%)

Audited 2026-10-12

RESCAN STATUS

Queued

PowerShell Daemon Active

Stale Nodes Exceeding Freshness Limit

OPS-NET-002 (ops-sw01.corp.local) | Cisco IOS 15.2(7)E3

Last Scanned: 2026-03-15 (211 days stale)

Trigger Rescan

IT-NET-001 (it-proxy01.corp.local) | F5 BIG-IP 14.1.4

Last Scanned: 2026-04-01 (194 days stale)

Trigger Rescan

ENG-SRV-002 (eng-nexus01.corp.local) | Apache HTTP 2.4.51

Last Scanned: 2026-04-10 (185 days stale)

Trigger Rescan

FIN-SRV-002 (fin-db01.corp.local) | log4j-core 2.14.0

Last Scanned: 2026-05-15 (150 days stale)

Trigger Rescan