Inventory evidence
Join asset findings to dated KEV and EPSS records. Keep the original rows.
Import scanner CSV Map columns, then join evidence
Up to 5,000 rows or 2 MiB. Original columns are preserved.
No inventory loaded. Nothing you enter is uploaded.
A CVE cell can contain comma, semicolon or whitespace-separated identifiers. Repeated asset rows stay separate. Invalid rows stop the join.
Joined inventory
What these signals mean
Sorting is a view, not a risk rating. KEV membership does not prove this asset is affected. EPSS estimates exploitation in the wild, not on this particular asset.
| Row | Asset / owner | CVE | KEV | EPSS probability | Record |
|---|
Inspected source record and evidence
Export preserves source SHA-256, mappings, filters, original columns and dated public evidence. No affected-version inference or automatic remediation deadline.
Trace a finding back to its row.
The same CVE on two assets is two review items. A multi-CVE cell expands into separate rows without losing its source reference.
How the inventory join worksRecord the actual decision.
Use the existing handoff worksheet when you need to record applicability, owner evidence and the next action for a small CVE list.
Open the CVE worksheet