Vulnerability Management & Patch Prioritization Dashboard

Risk-weighted exposure tracking · Patch SLA compliance · KEV-confirmed critical findings

Risk-Weighted Exposure Score
4,847
-33% vs. 12w ago
Critical KEV on Tier-1
3
-73% vs. peak
Critical SLA Compliance
91.4%
+13.4pp
MTTP Critical (days)
6.2
-2.1d vs. target
Patch Recurrence Rate
11.3%
Spike W8: 19.4%
Internet Attack Surface
612
+18 units (2w)

Risk-Weighted Exposure Score Trend (12 weeks)

Vulnerability Age Distribution

SLA Compliance Rate by Severity

MTTP by Asset Class

Compensating Control Coverage

Zero-Day Exposure Window

14.3
days avg exposure
CVE-2024-4567 (Log4j v3) 22d
CVE-2024-5678 (Apache) 11d
CVE-2024-6789 (OpenSSL) 9d

Vulnerability Density by Asset Owner (open findings per 100 assets)

Business Unit Asset Count Open Findings Density Critical High
Clinical Systems 842 1,247 148.1 27 134
OT / ICS Infrastructure 316 428 135.4 8 51
Corporate IT 1,583 1,891 119.5 14 187
Research & Development 427 489 114.5 6 62
Supply Chain Systems 294 312 106.1 4 39
Finance & HR 218 197 90.4 2 24
Marketing & Sales 386 341 88.3 3 41
Data Center Infrastructure 612 527 86.1 9 73
Cloud Services 184 142 77.2 1 18
Security & Compliance 96 58 60.4 0 7
Total / Average 4,958 5,632 113.6 74 636

Internet Attack Surface Exposure Index

Patch Failure Recurrence Rate

KEV-Confirmed Critical Finding Detail (Open CVSS ≥9.0)

CVE ID Asset Tier CVSS KEV Age (d) Owner Control
CVE-2024-4567 web-app-prod-01 T1 9.8 KEV 22 Clinical Sys None
CVE-2024-5678 api-gateway-02 T1 9.4 KEV 11 Corporate IT WAF rule
CVE-2024-6789 vpn-concentrator-03 T1 9.1 KEV 9 Security IP whitelist

Organization Profile

Organization:MedTech Corp
Endpoints:3,800
Servers:620
Cloud instances:538
Internet-facing assets:147

Current Status

RWES reduction (12w):-33.0%
Critical SLA target:95%
Current Critical SLA:91.4%
OT/ICS MTTP breach:+32d vs. SLA
Next audit:Q1 2025