Tenable Product and Research Update Newsletter - April 2025...

Tenable Vulnerability Management

The new “Vulnerability Age: Managing SLAs with VPR” widget is now live in TVM dashboards

This new matrix widget lets you quickly assess vulnerabilities by VPR and age. It is especially useful for tracking compliance with SLAs and policies. Columns display the counts of vulnerabilities discovered within a specified time period, and rows categorize vulnerabilities by VPR range.

The widget is available in these dashboards:

• PCI Quarterly Internal Vulnerability Scanning (Explore)
• Vulnerability Management Overview (Explore)
• PCI Scan Monitoring (Explore)
• Fundamental Cyber Hygiene Report Card (Explore)

Find it in the widget library under its name and add it to your custom dashboards.

Note: Not on the TVM landing page yet? Simply add the Vulnerability Management Overview (Explore) dashboard from the library.

Asset Criticality Rating (ACR)/Asset Exposure Scores (AES) Updates

Tenable Vulnerability Management now includes a new AES (beta) score. We have enhanced our prioritization models with diversified data sources and updated algorithms to further improve exposure score accuracy. These changes should enhance remediation prioritization efforts and explainability. Please check out the knowledge base for more details on algorithm changes.