Question

A vulnerability analyst reviews the latest scan results and must decide which finding to escalate first. Four vulnerabilities were identified, all with a CVSS base score of 7.5. Business context: the organization stores customer payment data on an internal database server. Which finding should the analyst prioritize for immediate remediation based on threat context and asset exposure?

Accepted Answer

A vulnerability on an internet-facing web server with a publicly available proof-of-concept exploit currently being used in active campaigns

Answer

A vulnerability on an internal print server located on an isolated management VLAN with no external connectivity

Answer

A vulnerability on a developer's workstation that is powered off outside of business hours and used only for local testing

Answer

A vulnerability on an internal file server for which no known exploit code exists and no threat activity has been observed