What it is
Lists the CVEs associated with the services running on this host (matched from the product and version each service advertises). Indicates known exploited CVEs (CISA KEV) and the EPSS exploit likelihood and CVSS severity and linking each to it's record in the National Vulnerability Database.
Why it matters
A starting point rather than a verdict. Matching is done on banner versions, so expect false positives from backported patches, and do not read an empty list as proof that the host is clean.
How this assessment works
Skopeon Labs queries public infrastructure signals and authoritative network protocols directly from external sensor nodes. All evaluations are completely non-invasive and agentless, assessing observable configurations without sending malicious payloads or disrupting service.
Operational Scope & Limitations
This check evaluates public perimeter responses observable at the time of inquiry. Endpoints protected behind third-party reverse proxies or CDNs reflect the edge configuration of the proxy layer.