update vuln sources

fleetdm · Oct 29, 2024 · 593b477 · 593b477
1 parent 965ff45
commit 593b477
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/articles/vulnerability-processing.md b/articles/vulnerability-processing.md
@@ -28,9 +28,9 @@ For Ubuntu Linux, kernel vulnerabilities with known variants (ie. `-generic`) ar
 ## Sources
 
 Fleet combines multiple sources to get accurate and up-to-date CVE information:
-- [National Vulnerability Database](https://nvd.nist.gov/developers/vulnerabilities) CVE feeds
-- [VulnCheck](https://vulncheck.com/) CVE feeds
-- [Mac Office release notes](https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac) for Office for Mac
+- [National Vulnerability Database](https://nvd.nist.gov/developers/vulnerabilities) CVE feeds and CVSS Scores (from primary sources.  Only available on Fleet Premium)
+- [VulnCheck](https://vulncheck.com/) Enriched NVD CPE Data
+- [Mac Office release notes](https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac) Office for Mac vulnerabilities
 - [Microsoft MSRC Security Bulletins](https://msrc.microsoft.com/update-guide) for Windows OS vulnerabilities
 - [OVAL definitions](https://github.com/fleetdm/nvd/blob/master/oval_sources.json) for Linux software