How do I find end-of-life vulnerabilities?
Device Agent detects end-of-life (EOL) applications and operating systems and reports them as vulnerabilities. Unlike other vulnerabilities, EOL advisories do not include a CVE. Instead, they identify software versions that are no longer supported by the vendor and no longer receive security updates.
How to identify EOL findings
EOL vulnerability identifiers begin with "HID-8-". Use this prefix to quickly locate EOL findings in your vulnerability list.
How to view EOL vulnerabilites
- Log in to Security Center.
- Click Vulnerabilities in the main menu.
- Enter "HID-8-" in the search field to display end-of-life vulnerabilities.
- Select a finding to review the details panel, which shows the severity, affected asset, application version, and recommended solution.
What information is included in EOL vulnerabilities
- The affected product.
- The EOL version and date.
- The impact of running unsupported software.
- Recommended remediation.
For example, a finding may indicate that an EOL version of Adobe Acrobat Reader no longer receives security updates and may contain unpatched vulnerabilities, with a recommendation to upgrade to a supported version.
No CVE for EOL findings
EOL vulnerabilities do not include a CVE identifier. This is expected behavior and does not mean the finding is inaccurate.