Changelogs

Elements Exposure Management (XM)

  • Vulnerability Management Portal – 2025-12-31 Update

    Read more

    Version 4.36.4 released December 31st, 2025

    • Disabled editing of asset properties in preparation for migration to Devices → Computers and Devices → Unmanaged Devices views.
    • Removed “archive assets period” and “store assets period” settings in preparation for migration to Devices → Computers and Devices → Unmanaged Devices views.
    • Disabled the Vulnerability Users page and related API; use Security Administrators instead.
    • Removed account locking after multiple failed API key attempts.
    • API keys are now locked after 50 failed attempts, improving security without blocking the entire account.
    • Agent scanning will now be automatically enabled for all new devices in companies with Vulnerability Management or Exposure Management subscriptions as soon as they are installed. This means no user interaction is needed to start scanning.
  • Vulnerability Management System Scan – 2025-12-31 Update

    Read more

    SystemScan 106672, released December 31, 2025

    New features and improvements:
    [RADAR-32917] – Capability to detect vulnerabilities in Apache Tika core and Apache Tika PDF parser module in authenticated scanning for Windows
    [RADAR-32532] – Capability to detect vulnerabilities in Control-M/Agent in authenticated scanning for Windows
    [RADAR-17003] – Capability to detect vulnerabilities in Eaton Intelligent Power Manager in authenticated scanning for Windows

  • Vulnerability Management System Scan – 2025-12-23 Update

    Read more

    SystemScan 106606, released December 23, 2025

    New features and improvements:
    [RADAR-32916] – Capability to detect vulnerabilities in N-able Take Control Agent in authenticated scanning for Windows
    [RADAR-32714] – Capability to detect vulnerabilities in Apache Causeway in authenticated scanning for Windows
    [RADAR-32248] – Capability to detect vulnerabilities in MongoDB Connector for BI in authenticated scanning for Windows
    [RADAR-32145] – Capability to detect vulnerabilities in Opera browser editions in authenticated scanning for Windows
    [RADAR-28237] – Capability to detect vulnerabilities in WatchGuard Mobile VPN with SSL client in authenticated scanning for Windows
    [RADAR-23183] – Capability to detect vulnerabilities in Spring Cloud Gateway in authenticated scanning
    [RADAR-18545] – Capability to detect vulnerabilities in Total Commander in authenticated scanning for Windows

  • Vulnerability Management System Scan – 2025-12-19 Update

    Read more

    SystemScan 106562, released December 19, 2025

    New features and improvements

    [RADAR-32710] – Capability to detect vulnerabilities in Apache Syncope in authenticated scanning
    [RADAR-32610] – Capability to detect vulnerabilities in Autodesk 3ds Max in authenticated scanning for Windows

  • Vulnerability Management System Scan – 2025-12-12 Update

    Read more

    SystemScan 106352, released December 12, 2025

    New features and improvements

    [[RADAR-32681] – Capability to detect vulnerabilities in AWS Wickr desktop clients in authenticated scanning for Windows
    [RADAR-32641] – Capability to detect vulnerabilities in Asustor Backup Plan in authenticated scanning for Windows
    [RADAR-32640] – Capability to detect vulnerabilities in Asustor EZ Sync in authenticated scanning for Windows
    [RADAR-32419] – Capability to detect vulnerabilities in MongoDB BI Connector ODBC in authenticated scanning for Windows
    [RADAR-16168] – Capability to detect vulnerabilities in HP System Event Utility in authenticated scanning for Windows

  • Vulnerability Management System Scan – 2025-12-09 Update

    Read more

    SystemScan 106258, released December 9, 2025

    New features and improvements

    [RADAR-32777] – Capability to detect vulnerabilities in N-central windows agent and N-central probe in authenticated scanning for Windows
    [RADAR-32711] – Capability to detect vulnerabilities in Fluent Bit in authenticated scanning for Windows

  • Vulnerability Management System Scan – 2025-12-08 Update

    Read more

    SystemScan 106220, released December 8, 2025

    New features and improvements

    [RADAR-32754] – Capability to detect vulnerabilities in Synology ActiveProtect Agent in authenticated scanning for Windows
    [RADAR-32633] – Capability to detect vulnerabilities in GoSign Desktop in authenticated scanning for Windows
    [RADAR-32600] – Capability to detect vulnerabilities in Intel Thread Director Visualizer in authenticated scanning for Windows
    [RADAR-32229] – Capability to detect vulnerabilities in Ankitects Anki in authenticated scanning for Windows
    [RADAR-32148] – Capability to detect vulnerabilities in Razer Synapse in authenticated scanning for Windows
    [RADAR-32132] – Capability to detect vulnerabilities in Joplin in authenticated scanning for Windows
    [RADAR-32357] – Capability to detect Oracle E-Business Suite Remote Code Execution Vulnerability (CVE-2025-61882)

  • Exposure Management – 2025-12-02 Update

    Read more

    New release includes updates on the Attack Path visualization and Environment→Network page:

    AttackPath visualization:

    • The AttackPath visualization has now been updated to show verified connections between nodes in the attack path diagrams.  
    • An option to show verified network connections has been added to the main Attack   
      Path visualization view. This option is enabled by default and may be toggled through   
      the control panel.   
    • Connections are green when verified connection findings are available. Connections   
      are shown as dashed lines where verifications are unavailable. Verifications will not be   
      possible if the source node does not have the EDR agent installed. The step flyout now   
      includes fields that show which ports are reachable from the source node.  
    • The legend panel includes new explanatory text and a key for the new line styles.  
    • The Attack Path simulator discards findings older than 30 days.
    image.png

    Environment → Network page:

    • List of company external assets in now default landing page on the Environment → Network page
      • Page design has been updated while preserving all of the functionality as before
    • Internet tab is moved as a secondary tab providing possibility to search for the publicly visible assets
      • Page design has been updated while preserving all of the functionality as before
      • Search results now contain also an indicator (checkmark) if publicly visible assets is already added to the scan group
    Pasted Graphic 1.png
    Pasted Graphic 2.png
  • Vulnerability Management Portal – 2025-12-02 Update

    Read more

    Version 4.36.3 released December 2nd, 2025

    • Added a pop-up notification to inform users about the upcoming removal of Devices → Vulnerability assets page by the end of 2025.
    • Resolved an issue causing the Vulnerability Management dashboard on the Home → Overview tab to display empty results instead of vulnerability data.
  • Vulnerability Management System Scan – 2025-12-02 Update

    Read more

    SystemScan 106126, released December 2, 2025

    New features and improvements

    [RADAR-32596] – Capability to detect vulnerabilities in Intel PresentMon in authenticated scanning for Windows
    [RADAR-32085] – Capability to detect vulnerabilities in Autodesk Fusion and Fusion 360 in authenticated scanning for Windows