DependencyTrack / DependencyTrack/frontend
Improving vulnerability audit through a prioritization score, CVSS and EPSS
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 10h 56m
- Merged PRs (30d)
- 84
Description
### Current Behavior
In the `Audit Vulnerabilities` tab of the project view, I identified a lack of properties useful to the prioritization of the analysis of those vulnerabilities.
The most relevant properties currently present are `CWEs` and `Severity`, which I find lacking by themselves.
### Proposed Behavior
As this enhancement request affects both frontend and backend, I will only detail the effects on the frontend in the following proposition. Please review it accompanied by [its corresponding backend issue](https://github.com/DependencyTrack/dependency-track/issues/5348) for completeness.
To ease vulnerability analysis, I propose to add properties to the `Audit Vulnerabilities` tab: a prioritization score (visible by default), EPSS, EPSS percentile, CVSSv2 base score and CVSSv3 base score (invisible by default).
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.