Valnerability issue--Server patching

Question

We are getting Patches Vulnerability report and report is showing Sep_2023 security patches are missing on server 2016 and 2019. In December month all security patches are installed. Checked for update on the server and its showing your server is up to date. My question is Need to update Sep_2023 patches and why server did not deduct those patches? Is there any security issue and need to install old patches? And do we need to install superseded patches? Missing patches details are below. Sep-2023 KB503021-Win 2016-Missing on server Sep-2023 KB5030213 - Win 2019-Missing on server

Answer 1

Hello, The latest cumulative update contains and improves on the previous cumulative update. KB5030213 is the cumulative update for September 2023, which has been replaced by KB5034119, you just need to install the latest cumulative update, you don't need to install previous cumulative updates. You can download updates from Microsoft Update Catalog: https://www.catalog.update.microsoft.com/home.aspx Ref: https://support.microsoft.com/en-us/topic/january-9-2024-kb5034119-os-build-14393-6614-7e7dae78-5944-4041-bf3d-4660e5ef7bb4 Best Regards, Hania Lian

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

It is not uncommon to encounter situations in which specific patches are marked as missing in vulnerability reports despite the server being up to date. There could be several reasons for this discrepancy:

• Superseded Patches
• Detection Mechanism - (vulnerability scanning tool or software) 
• Server Restart
• Specificity of the Patch

Here are some steps you can take:

• Check Update History
• Review Installed Updates
• Re-scan and Reevaluate
• Contact Vendor Support: (If the issue persists, consider reaching out to Microsoft support)