Prisma Cloud Compute: CVEs flip flopping issues in early version of Prisma Cloud Defenders
426
Created On 07/03/25 17:43 PM - Last Modified 05/06/26 13:59 PM
Symptom
When multiple vulnerability scans are performed and in some cases we can see scans miss previously detected CVEs despite no changes to the host or images. This can result in false negatives which is a security concern.
Environment
- Prisma Cloud Compute Selfhosted v32.06
- Prisma Cloud Compute Defender v32.06
- Prisma Cloud Enterprise Edition v32.06
Cause
In previous versions like 32.06, we were using OVAL advisory. However, from version 33.03, we moved to Redhat VEX advisory which is significantly more stable and reliable.
Resolution
Upgrade your selfhosted console and defender to 33.03 or later versions which will move the advisory from OVAL to Redhat VEX.