Common Vulnerabilities and Exposures

[Trevor Chandler]

40K+? Are you kidding me!!!!!

Is this subject (CVEs) covered in any of the CompTIA courses?

 

[precious]

SY0-701
4.3 Explain various activities associated with vulnerability

 

[Tess Sluijter]

40K+? Are you kidding me!!!!!

Is this subject (CVEs) covered in any of the CompTIA courses?

Yes, 40k. Or more.

Many of those are Wordpress Plugins, or Linux kernel issues. Those two, based on what I learned from the Open Source Security podcast, are the two biggest sources of CVEs, with thousands and thousands every year.

And yes, knowing about CVE's is part of Sec+, CySA+, Pentest+ and CASP+.

 

[Jose A Ruiz Marquez]

Yes, it's covered on a few certifications like Tess explained. Also on the tests for those certifications you will get questions where you need to analyze and interpret scores, and prioritize which CVE to address first. Others might give you a scan report and ask what action to take next. You might see questions about a pentest and how to exploit a specific CVE by choosing the right tool. On CASP+ you get questions asking how to mitigate high-risk CVE without disrupting business operations.

 

[Trevor Chandler]

Yes, it's covered on a few certifications like Tess explained. Also on the tests for those certifications you will get questions where you need to analyze and interpret scores, and prioritize which CVE to address first. Others might give you a scan report and ask what action to take next. You might see questions about a pentest and how to exploit a specific CVE by choosing the right tool. On CASP+ you get questions asking how to mitigate high-risk CVE without disrupting business operations.

Awesome!!!

Thank you Jose!!!!