SystemScan 104987, released October 6, 2025

New features and improvements:

[RADAR-31814] – Capability to detect vulnerabilities in NetSupport Manager in authenticated scanning for Windows
[RADAR-31635] – Capability to detect vulnerabilities in Apache Zeppelin in authenticated scanning

SystemScan 104963, released October 3, 2025

New features and improvements:

[RADAR-31811] – Capability to detect vulnerabilities in Snappy Java in authenticated scanning

System Scan 104833, released September 26, 2025

New features and improvements:

[RADAR-31900] – Capability to detect vulnerabilities in Apache DolphinScheduler in authenticated scanning
[RADAR-31813] – Capability to detect vulnerabilities in Apache Kafka Connect Runtime in authenticated scanning
[RADAR-31812] – Capability to detect vulnerabilities in Apache Kafka Connect API in authenticated scanning
[RADAR-31611] – Capability to detect vulnerabilities in Apache Seata in authenticated scanning
[RADAR-3041] – Capability to detect vulnerabilities in CCleaner in authenticated scanning for Windows

System Scan 104782, released September 24, 2025

New features and improvements:

[RADAR-32016] – Capability to detect vulnerabilities in Apache Fory in authenticated scanning
[RADAR-31925] – Capability to detect vulnerabilities in Greenshot in authenticated scanning for Windows
[RADAR-31660] – Capability to detect vulnerabilities in Seagate Toolkit in authenticated scanning for Windows

Version 4.35.6 released September 24th, 2025

• Fixed multiple potential security issues.
• Resolved an issue where duplicated vulnerabilities appeared in Assets related to Elements Agent scan results.
• Added a popup announcing the removal of the Device Discovery page by the end of 2025.
• Introduced several performance enhancements.

System Scan 104727, released September 22, 2025

New features and improvements:

[RADAR-31994] – Capability to detect vulnerabilities in Poly Lens Desktop in authenticated scanning for Windows
[RADAR-31729] – Capability to detect vulnerabilities in HP Security Manager in authenticated scanning for Windows

XM newsletter week 38

• Exposure executive summary report is now available in My Reports
  • Summary report can be found in Elements portal under Reports → My Reports and by selecting from templates list
    

    

  • Summary report can be scheduled for being emailed like any other My Report templates via “Emails notifications and reports” tab under Reports menu
• Exposure management savable views (on various lists such as Recommendations, Findings, Identities) can now be shared and accessed on organization level.
  

  

• Threat intel CISA KEV information of CVEs are now visible on the UI if the CVE is known for having a public campaign
  

  

System Scan 104461, released September 04, 2025

New features and improvements:

[RADAR-14800] – Capability to detect vulnerabilities in Atlassian Jira Service Management (previously known as Jira Service Desk) in authenticated scanning for Windows

XM newsletter week 36

• We’ve enhanced Luminen, our LLM-powered helper, to deliver clearer and more relevant descriptions for recommendations by taking into account organization-specific findings. All of this is done in a privacy-protected manner, ensuring that your data remains secure while making recommendations easier to understand and act upon. There is a possibility to switch from generic recommendations to organization specific and back. 

• We’ve enhanced the Findings details page with AI-generated CVE descriptions for vulnerabilities that appear in XM Recommendations. This update provides clearer, more contextual insights into CVEs, helping security teams better understand the nature and impact of vulnerabilities without needing to cross-reference external sources.
• We have enhanced following identity features
  • Identity information has been enriched with Entra ID role information (visible in the Identity details flyout). Information is provided separately for privileged and non-privileged roles. 
  • New column “Last login device” is now available in the Identities table showing the information to which device Identity has logged in. In case customer has EPP license, there is also a link to the given device. Information about time of the login is available in the Identity’s details flyout. 

System Scan 104409, released September 01, 2025

New features and improvements:

[RADAR-31511] – Capability to detect vulnerabilities in Apache Kafka in authenticated scanning

Version 4.35.5 released August 27th, 2025

• Info banner about adding many new detections for RPM-based Linux distributions. Read more here.