Devices not showing in CVE Vulnerable Devices report despite being vulnerableSolved

Hey! I noticed the same thing too. We even ran a scan using another vulnerability management tool and that showed some vulnerabilities, but Hexnode’s Vulnerable Devices section was empty. Curious how both tools differ.

Yeah, I think it depends on what exactly each tool checks for. Most vulnerability management scanners perform deep vulnerability and malware scanning, while Hexnode’s patch report focuses on update-related issues.

Hey folks.

That’s a great observation @jimena ! Let me clarify how this works.

Currently, Hexnode identifies vulnerabilities based on pending app and software updates detected on the device.

If your OS and all apps are up to date, you won’t see any devices listed under Vulnerable Devices, which means everything is already patched and secure from known update-based risks.

Now, regarding the difference you noticed using another management tool, such tools perform in-depth scans that detect vulnerabilities related to malicious content, viruses, and other advanced security threats beyond patch levels.

We’re excited to share that our upcoming product Hexnode XDR (Extended Detection and Response) will bring advanced vulnerability and threat detection capabilities.

Stay tuned to the Release Notes page for updates on the XDR product launch.

Best Regards,
Isabel Lora
Hexnode UEM

That makes a lot of sense now. Thanks for clarifying that, @isabel_lora . Excited to see what XDR brings when it rolls out.