Vulnerability Management & Patch Posture

Meridian Healthcare Systems · Q1 2025 · 14,000 Assets · 4,847 Open CVEs

Tier 1 Critical SLA: 82% (Target: 85%)

EiTW CVEs: 7 (3 on Tier 1)

Scan Coverage: 94.2%

Risk-Weighted Exposure

68.4

-12.3 (15%)

Critical CVE Density

4.7

-1.2 (20%)

Patch SLA Compliance

82%

+3% (below target)

MTTR (Critical)

14.2d

-2.8d (16%)

EPSS-Weighted Backlog

127.3

-18.4 (13%)

Recurrent CVE Rate

8.3%

+1.2% (needs attn)

New vs. Remediated CVE Velocity (16 Weeks)

EPSS vs. CVSS Risk Positioning

Open CVE Backlog by Severity

MTTR Trend by CVSS Tier (12 Months)

Risk Exposure Gauge

Target: <50 · Current: 68.4

Compensating Controls

Network Segmentation 87%

WAF Rules Active 94%

IPS Signatures 76%

EDR Coverage 98%

Asset Scan Coverage

14,000 Assets · 94.2% Scanned

Open CVE Backlog Heatmap by Team & Severity

Critical

High

Medium

Low

Infrastructure

312

743

124

Medical Devices

124

487

891

156

Applications

241

689

Cloud/SaaS

163

568

Top 15 CVEs by EPSS-Weighted Risk

CVE ID	CVSS	EPSS	Assets	Status	EiTW
CVE-2024-23897	9.8	0.89	47	Patching	✓
CVE-2024-21887	9.1	0.92	12	Open	✓
CVE-2023-48788	8.8	0.78	23	Mitigated
CVE-2024-3400	10.0	0.65	8	Patching	✓
CVE-2024-20253	9.9	0.61	34	Open
CVE-2023-46604	9.8	0.54	19	Remediated
CVE-2024-1086	7.8	0.49	156	Patching
CVE-2024-21762	9.6	0.44	7	Mitigated	✓