Introduction
The Vulnerability Page offers a centralized view of known security vulnerabilities affecting your managed endpoints. You can identify, assess, and prioritize threats using CVE data, AI-evaluated risk levels, exploit status, and severity scores, and deploy Windows KBs or Mac OS patches directly to affected computers from the Cloud console.
Start with the interactive demo to walk through key setup steps and core workflows:
Interactive Demo
Or use this guide below to explore our Vulnerabilities page and features with detailed screenshots.
Supported Subscriptions
Your team must have Splashtop Autonomous Endpoint Management (AEM) enabled.
Page is visible to Owner, Super Admin, and Admin roles.
Overview of the Vulnerability Page
CVE ID
The unique identifier for the vulnerability, as listed in the Common Vulnerabilities and Exposures (CVE) database (e.g., CVE-2024-12345).
Known Exploit (KEV)
Indicates whether a known, active exploit exists for the vulnerability.
- Yes: The issue is known to be exploited in the wild.
- No: No confirmed active exploits at this time.
CVSS
The Common Vulnerability Scoring System score (0–10) that measures the technical severity of a vulnerability based on standardized criteria (e.g., attack complexity, impact, required privileges).
Risk (AI Evaluated)
An AI-assessed risk level that reflects the potential impact and likelihood of exploitation in your environment. It provides additional context beyond the standard CVSS score to help with prioritization. Risk level can be Severe, Medium, Low, Unrated. Unrated means the AI has not yet generated a risk evaluation, or there is insufficient information to determine a risk level.
Published Date
The date when the vulnerability was first publicly disclosed. Older vulnerabilities may already have patches available.
Computers
The number of systems where the vulnerability has been detected.
Affected Products
The operating system version running on the affected endpoint.
Filter and Search
Use filter to quickly find vulnerabilities by Known Exploit, CVSS or Publish Date. Use Search for specific CVE ID or Affected OS.
Click a row to show details.
EPSS Score (Exploit Prediction Scoring System)
The EPSS score — short for Exploit Prediction Scoring System — estimates the likelihood that a specific vulnerability (CVE) will be widely exploited in the wild within a given time frame (usually the next 30 days).
- Range: percentage, 0%–100%
-
Meaning:
- Higher scores = greater probability of broad real-world exploitation
- Lower scores = less likely to be broadly exploited
EPSS is maintained by the FIRST.org community and complements the CVSS score:
- CVSS measures technical severity (how bad it could be).
- EPSS measures exploit likelihood (how likely it is to be exploited at scale).
Using EPSS helps prioritize patching — for example, a vulnerability with a moderate CVSS but a high EPSS score may require more urgent attention.
Details
Shows in-depth information about the selected vulnerability, including its description, external link to its NVD source. Use this tab to understand the nature and severity of the issue.
Computer Name
Lists the specific endpoint(s) where this vulnerability is detected, helping you identify which systems are affected and prioritize remediation.
OS
Displays operating system information for the affected endpoint(s), such as version and build number, to assist in verifying patch compatibility and deployment scope.
AI Brief
Provides an AI-generated summary of the vulnerability, including AI evaluated Risk (Severe, Medium, Low, Unrated), recommended action, patch available or not, attack factor / impact and more.
Localization
Click the earth icon to select your preferred language setting.
Automatic CVE data updates
While you remain on the Vulnerability Page, it checks for CVE data changes every 60 seconds. When new data is available, the CVE list, OS list, and computer list update automatically.
The update keeps you on the same page and preserves your filters, search terms, and sorting. If the current page no longer exists after the update, the view moves to the last available page.
When a CVE detailed view is open, the Computers and OS tabs update automatically. The Details, Remediation, and AI Brief tabs do not refresh as part of the incremental update. If the selected CVE no longer exists, the detailed view closes automatically.
Supported Actions
You can act on vulnerabilities directly from this page. Select the CVEs with the checkbox and open the Actions menu.
| Option | What it does |
| Remediate | Deploys the OS updates that fix the selected CVEs to the affected computers. |
| Mark controlled | Marks the CVEs as mitigates outside Splashtop. Its Remediation Status changed the Control applied. |
| Unmark controlled | Removes the controlled status. The Remediation Status goes back to Overdue, Due soon or Due later. |
Remediate vulnerabilities
Step 1. Select one or more CVEs, then click Actions > Remediate.
Step 2. Select computers. The list shows only the computers affected by the selected CVEs. The Vulnerabilities column shows how many of those CVEs affect each computer. Select the computers you want to update, then click Next.
Note: Computers that aren't ready to update are generally grayed out and cannot be selected. Connector computers (RDP, RDS, VNC, and SSH) do not appear in the list because they cannot receive OS updates.
Step 3. Set remediation schedule. Choose when to install the updates and whether computers restart afterwards. Then click Apply.
More features will be added at a later stage.