DependencyTrack / DependencyTrack/frontend

Improving vulnerability audit through a prioritization score, CVSS and EPSS

Open
#1,341 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Vue
Stars
171
Forks
250
Avg merge
10h 56m
Merged PRs (30d)
84

Description

### Current Behavior

In the `Audit Vulnerabilities` tab of the project view, I identified a lack of properties useful to the prioritization of the analysis of those vulnerabilities.

The most relevant properties currently present are `CWEs` and `Severity`, which I find lacking by themselves.

### Proposed Behavior

As this enhancement request affects both frontend and backend, I will only detail the effects on the frontend in the following proposition. Please review it accompanied by [its corresponding backend issue](https://github.com/DependencyTrack/dependency-track/issues/5348) for completeness.

To ease vulnerability analysis, I propose to add properties to the `Audit Vulnerabilities` tab: a prioritization score (visible by default), EPSS, EPSS percentile, CVSSv2 base score and CVSSv3 base score (invisible by default).

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/frontend/issues) for whether this enhancement was already requested

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.