fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.15k stars 432 forks source link

Allow multiple CVEs to be passed into search field in Software > Vulnerabilities #23984

Open ddribeiro opened 1 day ago

ddribeiro commented 1 day ago

Slack thread: https://fleetdm.slack.com/archives/C072L58U878/p1732121335606929

Problem

IT admins who use Fleet for vulnerability management might want to search their environment for multiple CVEs at a time. Currently, the search box on the Software > Vulnerabilities page only allows an admin to enter one CVE at a time. This means searching for multiple CVEs needs to be done one at a time.

What have you tried?

I tried to enter multiple CVEs in the search field on the Software > Vulnerabilities page, but doing this caused my search to return no results.

Potential solutions

A possible solution would be to allow Fleet admins to enter multiple CVEs into the search field. The CVEs could be separated by commas to denote separate search strings.

What is the expected workflow as a result of your proposal?

An IT who uses Fleet for vulnerability management would receive a list of CVEs that they'd need to check are present in their Fleet environment. They would log into Fleet and navigate to Software > Vulnerabilities. They would then be able to enter the list of CVEs into the search field, separated by commas, and return results for all the CVEs. This would be an improvement over the current method of searching for each CVE individually and noting the results.