Patch and Update reports in Hexnode UEM

Hexnode UEM’s ‘Scan for updates‘ action allows IT administrators to scan Windows devices for available patches and updates. With the addition of Patch and Update Reports, IT administrators can now access comprehensive information about the updates that are available for their devices, or identify which devices are missing these updates.

Creating Patch and Update reports

Patch and Update reports are categorized as follows:

• Available updates
• Devices missing updates
• Devices pending reboot
• Fully patched devices
• Critical updates
• Major updates
• Minor updates
• Updates awaiting approval
• Applicable updates
• Patch compliance
• Applicable vulnerabilities
• Vulnerable devices
• Patch automation

To generate any Patch and Update report:

1. Log in to your Hexnode UEM portal.
2. Navigate to Reports > Built-in Reports > Patch and Update.
3. Select the update report you want to generate.

Available updates

The list of updates available for Windows devices that are enrolled in Hexnode UEM.

The report contains the following details:

1. Update Name: Name of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The OS or app for which the update is available.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The number of devices where the update is in an Installed status. You can view the details of the devices, such as Device Name, User, OS, Version, and Serial Number, by clicking on the number corresponding to the respective update under the Installed Devices column.
6. Platform: The device platform to which the update is applicable.
7. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
8. Release date: Displays the date when the patch or update was officially released by the vendor.
9. KB Number: The Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
10. Update Classification: Indicates the type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
11. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
12. Type: Indicates whether the update is for the OS or an application.
13. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
14. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
15. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
16. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
17. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
18. Max Install Size: Displays the maximum size of the update after the installation processes (such as unzipping) are completed.
19. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
20. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
21. Reboot: Specifies whether the update requires a system reboot to complete the installation.
22. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
23. Impact: Displays the potential impact level of the update, categorized as Critical, High, Moderate, or Low.
24. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
25. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
26. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
27. Applicable Devices: The number of devices where the update status is anything other than ‘Installed’. This includes devices with statuses such as ‘Installable’, ‘Failed’, ‘Approved’, or ‘Pending Reboot’. You can view the details of the devices, such as Device Name, User, OS, Version, Serial Number, and Update status, by clicking on the number corresponding to the respective update under the Applicable Devices column.

Devices missing updates

The list of all Windows devices along with the number of available updates that have not yet been installed on each device.

The report contains the following details:

1. Device Name: Name of the device.
2. Username: Name of the user.
3. Platform: The platform of the device.
4. Last Successful Scan: The date and time when the device were last successfully scanned for updates.
5. Missing Updates: The number of available updates that are not installed on the device. You can view the details of the missing update, such as Name, Product, and Details, by clicking on the number corresponding to the respective device under the Missing Updates column.

Critical updates

The list of all patches with severity “Critical”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Release date: Displays the date when the patch or update was officially released by the vendor.
8. KB Number: The Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
9. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
10. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
11. Type: Indicates whether the update is for the OS or an application.
12. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
13. Max Download Size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
14. More Information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
15. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
16. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
17. Max Install Size: Displays the maximum size of the update after the installation processes (such as unzipping) are completed.
18. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
19. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
20. Reboot: Specifies whether the update requires a system reboot to complete the installation.
21. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
22. Impact: Displays the potential impact level of the update, categorized as Critical, High, Moderate, or Low.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.

Major updates

The list of all patches with severity “Important”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Release date: Displays the date when the patch or update was officially released by the vendor.
8. KB Number: The Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
9. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
10. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
11. Type: Indicates whether the update is for the OS or an application.
12. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
13. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
14. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
15. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
16. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
17. Max Install Size: Displays the maximum size of the update after installation processes such as unzipping are completed.
18. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
19. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
20. Reboot: Specifies whether the update requires a system reboot to complete the installation.
21. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
22. Impact: Displays the potential impact level of the update, categorized as Critical, High, Moderate, or Low.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.

Minor updates

The list of all patches with severity “Moderate”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Release date: Displays the date when the patch or update was officially released by the vendor.
8. KB Number: Displays the Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
9. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
10. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
11. Type: Indicates whether the update is for the OS or an application.
12. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
13. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
14. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
15. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
16. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
17. Max Install Size: Displays the maximum size of the update after the installation processes (such as unzipping) are completed.
18. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
19. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
20. Reboot: Specifies whether the update requires a system reboot to complete the installation.
21. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
22. Impact: Displays the potential impact level of the update, categorized as Critical, High, Moderate, or Low.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.

Updates awaiting approval

The list of all patches that are not yet approved by the admin.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
8. Release date: Displays the date when the patch or update was officially released by the vendor.
9. KB Number: Displays the Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
10. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
11. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
12. Type: Indicates whether the update is for the OS or an application.
13. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
14. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
15. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
16. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
17. Max Install Size: Displays the maximum size of the update after installation processes such as unzipping are completed.
18. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
19. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
20. Reboot: Specifies whether the update requires a system reboot to complete the installation.
21. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
22. Impact: Displays the potential impact level of the update, categorized as Critical, High, Moderate, or Low.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.

Devices pending reboot

The list of all devices with at least one update in the status “Pending Reboot”.

The report contains the following details:

1. Device Name: Name of the device.
2. Username: Name of the user.
3. Platform: The device platform to which the update is applicable.
4. Last Successful Scan: The date and time when the device were last successfully scanned for updates.
5. Updates Pending Reboot: The devices that are awaiting a reboot for the update to be fully applied.

Fully patched devices

The list of devices with all applicable updates installed.

The report contains the following details:

1. Device Name: Name of the device.
2. Platform: The device platform to which the update is applicable.
3. OS Version: The operating system version.
4. Device ID: The unique identifier assigned to the device upon its enrollment in Hexnode UEM.
5. Username: Name of the user.
6. Last Successful Scan: The date and time when the device were last successfully scanned for updates.

Applicable updates

The list of all patches applicable to the enrolled devices.

The report contains the following details:

1. Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
8. Release date: Displays the date when the patch or update was officially released by the vendor.
9. KB Number: Displays the Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
10. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
11. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
12. Type: Indicates whether the update is for the OS or an application.
13. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
14. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
15. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
16. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
17. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
18. Max Install Size: Displays the maximum size of the update after installation processes such as unzipping are completed.
19. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
20. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
21. Reboot: Specifies whether the update requires a system reboot to complete the installation.
22. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.

Patch Compliance

The list of all applicable patches and the percentage of devices on which the patch is installed.

The report contains the following details:

1. Name: The name of the update or patch, such as the version and identifier of the update.
2. Description: Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings.
3. Product: The software, application, or OS component that the patch or update applies to.
4. Missing Devices: Displays the number of devices where the update is not yet installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
8. Release date: Displays the date when the patch or update was officially released by the vendor.
9. KB Number: Displays the Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.
10. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
11. Identifier: Provides a unique identifier for the update, which can be used for tracking or reference purposes.
12. Type: Indicates whether the update is for the OS or an application.
13. Vendor: Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer.
14. Max download size: Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations.
15. More information: Provides a URL linking to a webpage with additional details or documentation related to the patch or update if there are any.
16. Support URL: Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update.
17. Approval Status: Indicates whether the update has been approved for installation through Hexnode UEM. (Pending or Approved).
18. Max Install Size: Displays the maximum size of the update after installation processes such as unzipping are completed.
19. Beta Update: Indicates whether the update is a beta version. The value can be either True or False.
20. Last Update Date: Indicates the most recent date when the update was added, detected, or released.
21. Reboot: Specifies whether the update requires a system reboot to complete the installation.
22. Uninstallation: Indicates whether the update can be uninstalled from the device after installation.
23. Requires Network Connectivity: Indicates whether an active network connection is required to download, install, or uninstall the update.
24. Requires User Input: Specifies if the update installation requires user interaction, such as providing consent or other inputs, to complete the process.
25. CVSS v3.1: Displays the Common Vulnerability Scoring System (CVSS) v3.1 score assigned to the update, as provided by recognized vulnerability databases.
26. Applicable Devices: List all the devices that need to have a particular patch or update installed.
27. Patch Compliance: Displays the percentage of devices in which a particular patch or update has been successfully installed, helping assess the overall compliance status across the organization.

Applicable Vulnerabilities

The list of all vulnerabilities applicable to the enrolled devices.

The report contains the following details:

1. Name: The name of the vulnerability, often corresponding to the related update or patch.
2. Description: Provides a summary of the vulnerability, including its purpose, the issues it resolves, and any improvements it brings.
3. CVE ID: The unique identifier assigned to the vulnerability by the Common Vulnerabilities and Exposures (CVE) system.
4. CVSSv3.1 Base Score: The base score of the vulnerability as per the CVSS version 3.1 standards, representing its severity.
5. CVSS Vector String: The CVSS v3.1 vector string describes the specific metrics used to calculate the base score of the vulnerability.
6. CVSS Rating: The qualitative severity rating of the vulnerability, such as Critical, High, Medium, or Low, based on the CVSS score.
7. CVE.org link: Provides a direct link to the CVE.org page for more details and references about the specific vulnerability.
8. Affected Devices: List all the devices that are affected by the corresponding vulnerability.

Vulnerable Devices

The list of all devices that are vulnerable along with the list of vulnerabilities.

The report contains the following details:

1. Device Name: The name of the device where the detected vulnerabilities are present.
2. Platform: The device platform on which the vulnerabilities have been identified.
3. Device ID: The unique identifier assigned to each device upon enrollment in Hexnode UEM.
4. Username: The name of the user associated with the device.
5. Last successful Scan: The date and time when the device was last successfully scanned for vulnerabilities.
6. Vulnerabilities: Lists the number of vulnerabilities detected on the respective device.

Patch Automation

The list of all automation created for patches.

The report contains the following details:

1. Name: The name of the patch automation policy created.
2. Description: Provides a summary of the patch automation policy, outlining its purpose or configuration details.
3. Created Time: The date and time when the patch automation policy was created.
4. Version: Indicates the version of the patch automation configuration or policy.
5. Platform: Specifies the platform (such as Windows or macOS) on which the automation is applied.
6. Mode: Displays the operational mode of the automation, such as Automatic or Manual.
7. Status: The current operational state of the patch automation, specifying whether the process is completed or still in progress.
8. Last Status Update: The most recent date and time when the status of the patch automation policy was updated.

On the Device missing updates, Device pending reboot and Fully patched devices report pages, you can click on the listed device and initiate the Scan for Updates right from the report page.

You also have the option to schedule reports at desired time intervals and have them automatically emailed to specified recipients. Additionally, you can Export the report to your device in either PDF or CSV format.