NEW RELEASE

Date: 15.05.2025

Release purpose:

• Extended support for EntraID Dynamic membership rules
• improved scanner performance
• improved scanner stability

XM newsletter week 20

Attack path visualization

• Added a link to primary finding in step details
• Grouping of similar assets to tidy up the view

Exposure views filtering

• Exposure views now support filtering by multiple values, e.g filters like “FindingSource Includes Identity, Network” are possible
• Exposure multi-value filters can be repeated with different operations to support logics such as “Tags Include NIST KISA” “Tags Does not include HIPPA”   

“MFA status” column in the Identities page

• New tooltip has been added to clarify the meaning of different MFA statuses Identity can have
• An adjustment to the MFA status logic has been made, when checking Entra ID Conditional Access policies. This might result in some of the Identities statuses changing from ‘Partially enabled’ to ‘Enabled’.

New “Account status” column in the Identities page

• New column has been added to the Identities table to indicate if the Identity’s account is enabled or disabled. Column is hidden from the default view, and can be added to the view. New filter has been also added, enabling filtering by account status.

Version 4.34.6 released May 13th, 2025

Fixed issues and minor improvements:

• [RADAR-30597] Resolved an issue where an insecure direct object references (IDOR) vulnerability in asset modification could lead to unauthorized asset changes.

SystemScan 102361, released May 05, 2025

New features and improvements:

[RADAR-23176] – Capability to detect vulnerabilities in Spring Data Commons in authenticated scanning
[RADAR-28233] – Capability to detect vulnerabilities in Amazon Corretto Java in authenticated scanning for Windows
[RADAR-30248] – Capability to detect vulnerabilities in SoftEther VPN in authenticated scanning for Windows
[RADAR-30444] – Capability to detect vulnerabilities in Netwrix Password Secure in authenticated scanning for Windows
[RADAR-30625] – Capability to detect vulnerabilities in Erlang/OTP in authenticated scanning for Windows

SystemScan 102240, released April 25, 2025

New features and improvements:

[RADAR-30547] – Capability to detect vulnerabilities in Prisma Access Browser in authenticated scanning for Windows

SystemScan 102184, released April 23, 2025

New features and improvements:

[RADAR-22307] – Capability to detect vulnerabilities in bandizip in authenticated scanning for Windows
[RADAR-30543] – Capability to detect vulnerabilities in IBM QRadar WinCollect Agent in authenticated scanning for Windows
[RADAR-30545] – Capability to detect vulnerabilities in IBM Aspera Desktop App in authenticated scanning for Windows
[RADAR-30589] – Capability to detect vulnerabilities in BleachBit in authenticated scanning for Windows
[RADAR-30590] – Capability to detect vulnerabilities in MySQL Shell in authenticated scanning for Windows

Version 4.34.5 released April 23rd, 2025

Fixed issues and minor improvements:

• [RADAR-26912] The VM portal is integrated with the Devices → Computers view, that will include “enable/disable” scanning buttons soon. Device Discovery view now automatically displays the current status of devices enabled/disabled in Devices → Computers view.
• [RADAR-28569] Performance of data synchronization (Asset and Vulnerabilities) with Exposure Management has been improved.