search

microsoft / MSRC-Microsoft-Security-Updates-API

Repo with getting started projects for the Microsoft Security Updates API (msrc.microsoft.com/update-guide)
https://msrc.microsoft.com/update-guide
MIT License
358 stars 114 forks source link

CVE to KB mapping, revised date #121

Open MindaugasRam opened 1 year ago

MindaugasRam commented 1 year ago

Hi, I have a question regards getting revised patches dates. For example: patch for CVE-2022-26928 initially was released in 2022-Sep cycle and if you query that it will give you output for 2023-May KB. But if you query for 2023-May Id it won't give you any info regards that CVE. So could you please help me with a query to get KB CVE mapping at having initial publish date and revision date in it. I am bit struggling to figure it out. It is run every month to get all KB ant CVE it patches

ex: Get-MsrcCvrfDocument -ID 2022-sep | Get-MsrcCvrfAffectedSoftware | Select-Object FullProductName,CVE,KBArticle | Where {($.CVE -like "CVE-2022-26928") -and ($.KBArticle -like "KB5026363") }

cpuck commented 1 year ago

There are syntax errors in the command. The working syntax is:
Get-MsrcCvrfDocument -ID 2022-sep | Get-MsrcCvrfAffectedSoftware | Select-Object FullProductName,CVE,KBArticle | Where {($.CVE -like "CVE-2022-26928") -and ($.KBArticle -like "KB5026361")}

It seems something in this UI is stripping out underscores and asterisks in the cmdlet. Replace "$." with "$_." and "KB5026361" with "starKB5026361star".