Vulnerabilities on Application Level

Question

Hi guys,

A customer ask me:

Is there file scan to check for vulnerabilities on Application Level? Is this optimal in sharepoint?

Can you give me some proofs for these points

Thanks a lot

Answer 1

Hi @Nghiem Huy Hoang (DPS.MS3),

Thank you for posting in this community.

Microsoft 365 uses a third-party scanning tool utilizing two different techniques to ensure full coverage of its assets: host-based and network-based.

Scans evaluate hosts and network devices for missing patches, configuration issues, and application vulnerabilities using up-to-date vulnerability information from industry sources such as the Microsoft Security Response Center (MSRC), the NIST National Vulnerability Database, and the MITRE Common Vulnerabilities and Disclosures Database.

Host-based scans are performed daily, network scans are performed weekly.

Microsoft 365 Security uses automated reporting to compare scan results over time, displaying new vulnerabilities when they're found. These reports are updated daily and are available to authorized personnel via the Patching and Vulnerability Compliance (PAVC) dashboard.

You can read this article to get more detailed information about Microsoft 365 vulnerability scanning and remediation.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.