1. Snyk
  2. Fixing and remediating issues
  3. Issue management

Articles in this section

Evaluating and prioritizing vulnerabilities

Prioritize and remediate by exploit maturity

You can filter detected vulnerabilities in your projects according to exploit maturity to see whether a specific vulnerability has an exploit in the wild and if so, how mature that exploit is.

In this way, you can prioritize and attend to the most important and risky vulnerabilities first.

The filter appears as follows:

image1.png

These values are available:

  • Mature: a published code exploit that can easily be used for this vulnerability is available.

  • Proof of concept: a published, theoretical proof-of-concept or detailed explanation that demonstrates how to exploit this vulnerability is available.

  • No known exploit: neither a proof-of-concept code nor an exploit were found for this vulnerability, or are not publicly available.

  • No data: this value indicates one of the following:

    • The issue is not a vulnerability (but rather, a license issue);

    • The ecosystem is not currently supported by Snyk (Linux); or

    • The project was imported prior to the release of this feature. Reimport the project in order to scan for this data.

The Exploit maturity filter is available from any detailed Projects page, from our Reports and from our Vulnerabilities DB. Furthermore, an API is now available as well.

Prerequisites:

Projects imported prior to the implementation of his feature cannot be evaluated for exploit maturity. Reimport the project in order to scan for this data.

Steps:

  1. Log in to Snyk.

  2. Go to the detailed Projects page for any of your projects

    image5.gif

  3. Work with and remediate vulnerabilities from the Issues tab of the Reports area as well:

    1. Filter reports by exploit maturity:

      image2.png

    2. View exploit maturity data from the Issues list in Grouped mode:

      image4.png

    3. View exploit maturity data from the Issues list in Ungrouped mode:

      image3.png