Unpatched Vulnerabilities

medium

unpatched-vulnerabilities

Known security vulnerabilities remain unpatched, enabling exploitation

TamperingElevation of PrivilegeDenial of Service

MITRE ATT&CK techniques

IDNameTactic
T1190 Exploit Public-Facing Application Initial Access
T1068 Exploitation for Privilege Escalation Privilege Escalation

Common Weakness Enumeration

Mitigating controls

ctrl-patch-1
Implement automated patch management
ctrl-patch-2
Perform regular vulnerability scanning
ctrl-patch-3
Establish patch SLAs based on severity
ctrl-patch-4
Use vulnerability management platform
ctrl-patch-5
Implement compensating controls for delayed patches

References