SHeron665370 (Community Member) asked a question.
Does anyone know if VC can spot Apache Struts CVE 2021-31805 & Spring Cloud CVE 2022-22963?
Can Veracode pick up CVEs because it feels like we should be able to query this with them? It would be nice to have some utility to search for a CVE and find out which projects are currently affected. Is this actually possible with the system as it is? Many thanks for any help on this.
.png){kind=logo}
Hi @SHeron665370 (Community Member) ,
Yes, Veracode Software Composition Analysis can pick up both, you can find out more here:
You can search for applications that are affected by a given CVE by using Analytics. I would recommend reaching out to your Veracode Customer Success Manager who can help you set this up.
Thank you,
Boy Baukema