Security News > 2023 > December > Kubescape open-source project adds Vulnerability Exploitability eXchange (VEX) support

With its innovative feature for generating reliable Vulnerability Exploitability eXchange documents, Kubescape became the first open-source project to provide this functionality.

Vulnerability Exploitability eXchange is a standard that facilitates the sharing and analyzing of information about vulnerabilities and their potential for exploitation.

VEX documents have emerged as a critical component in complementing Software Bill of Materials by informing users about the applicability of vulnerability findings.

Kubescape is leveraging its eBPF-based Kubernetes runtime reachability capability to generate VEX documents automatically that provide clear and actionable signaling for vulnerability prioritization and management.

Integrating Kubescape-generated VEX documents with open-source vulnerability scanners like Grype and Trivy enhances vulnerability management capabilities.

"Our mission is to simplify vulnerability management and provide security practitioners with the tools to make informed decisions. With Kubescape's VEX generation capability, we are enabling organizations to simplify the results of vulnerability scans and focus on the vulnerabilities that truly matter."

News URL

https://www.helpnetsecurity.com/2023/12/11/kubescape-vex-generation/