Open BEAR19931 opened 1 month ago
can confirm the issue. CVEs are also found here, but are not displayed in the reporting.
Server Details: PHP-Version : 8.1.2 Webserver : Apache/2.4.52 (Ubuntu) Version OCSReports: 2.12.2
Hi @LMS235 @BEAR19931 ,
The log info "CVE data found" means that the API request to CVE Search returned a list of CVEs for this software. From there, OCS will process the data and check if the versions match with the software present on OCS. If a CVE matches, then the log "CVE-[id] has been referenced" will be added and the entry will be added to the database.
I hope my explanation is understandable. :-)
Best regards, Charlene
OS: Ubuntu 22.04.4 LTS OCS Version : 2.12.2 PHP: 8.2 APACHE: 2.4.52
CVE DATA FOUND FOR MORE SOFTWARES BUT NOT DISPLAY ON CVE REPORTING
I also attach the regex of Adobe
Instead for other software it finds and lists the CVEs
Attach example:
Thanks