Managing Allowlist CVEs

In addition to viewing and managing vulnerabilities, Administrators can also manage their allow list in MetaDefender IT Access.

Adding to Allowlist - Single CVE

When Administrators are looking to add a single CVE to their allow list, they can do the following:

1. Sign into MetaDefender IT Access and navigate to Vulnerabilities
2. Check off the CVE that needs to be added, and select Actions > Update Allowlist Settings.
3. A pop up will appear where the CVE can be added to all policies and custom selected policies or devices.
4. Confirm with PIN and Save.

To review what level the CVEs are listed under for the allowlist, review the Allowlist Level column in the Vulnerabilities section.

Adding to Allowlist - Multiple CVEs

There are two methods to adding multiple CVEs to the allowlist. The first option is to follow the steps in the above section, or to do a CVE list upload

For adding multiple CVEs via a CVE list upload, the Administrators can do the following:

1. Sign into MetaDefender IT Access and navigate to Vulnerabilities
2. Select Allowlist CVEs and select Download Sample CVEs list. This will prompt a CSV download to begin.
3. Once completed, open the CSV and follow the format to create the list of CVEs you wish to add to the allowlist. Save changes.
4. Navigate back to MetaDefender IT Access > Vulnerabilities *> and select *Allowlist CVEs. Once the pop up appears, select Choose File and upload the CSV file.
5. A pop up will appear where the CVE can be added to all policies and custom selected policies or devices.
6. Confirm with PIN and Save.

To review what level the CVEs are listed under for the allowlist, review the Allowlist Level column in the Vulnerabilities section.

Removing CVEs from the Allowlist - Single CVE

To remove a single CVE from the allowlist, Administrators need to do the following:

1. Sign into MetaDefender IT Access and navigate to Vulnerabilities
2. Check off the CVE that needs to be removed, and select Actions > Remove From Allowlist.
3. A pop up will appear to confirm the removal of the CVE.
4. Confirm with PIN and Save.

Removing CVEs from the Allowlist - Multiple CVEs

To remove multiple CVEs from the allowlist, Administrators need to do the following:

1. Sign into MetaDefender IT Access and navigate to Vulnerabilities
2. Check off the CVEs that need to be removed, and select Actions > Remove From Allowlist.
3. A pop up will appear to confirm the removal of the CVEs, if there is a one that you no longer wish to remove, select the trash bin icon.
4. Confirm with PIN and Save.

To review what level the CVEs are listed under for the allowlist, review the Allowlist Level column in the Vulnerabilities section.