Top CVE findings on your virtual machines

Hi @subrahmanyam425 .  This feature requires enabling VM Manager.  Please see the below documentation on VM Manager and the associated setup process. 

https://cloud.google.com/security-command-center/docs/concepts-security-sources#vm_manager 

Hi @vaskenh 

I have previously followed it and also enabled VM manager API in my current project as well but that solution did not work for me.. I was able to see all components in Risk Overview page(SCC) except the "Top CVE findings on your virtual machines". For better understanding, I am attaching a screenshot. 

For your information, I have installed xz-utils vulnerability and also see CVE under compute engine( under OS_Info). But the same(CVEs) are not reflecting in Findings page as well as "Top CVE findings on your virtual machines".

I was having a look through the notes on this topic and trying to narrow down where the issue maybe.

Can you see the Vulnerabilities for the instance under the VM instance details? 

Can you see the Vulnerability when looking for Vulnerabilities in your Findings List?

Hi Andras,

I am having the same issues, where we have enabled VM Manger and Web Security Scanner. But, I don't see OS vulnerabilities on both sections you mentioned above.

I would normally only expect to see Findings in SCC if the VM Manager part is enabled and running properly. If you don't see anything in the VM Manager part i would recommend trying to concentrate on that part first and verify if all the requirements (including the OS Agent) are present and met. I would recommend checking out this link for all the pre-reqs and steps and see if anything missing