Automatic CVE Tracking with NIST

[bminnix]

Environment

• Nautobot version: > 2.3.0
• nautobot-device-lifecycle-mgmt version: > 3.0.0

Proposed Functionality

Use the National Institute of Standards and Technology's National Vulnerabilities Database to obtain and associate known vulnerabilities to software versions in Nautobot.

Use Case

1. User is tracking software versions for devices in the asset manager.
2. User can run a job that will automatically obtain and associate the CVEs known to NIST for all software versions in Nautobot.

[progala]

Released in 3.1