Chapter 5. Viewing vulnerabilities using the CLI

Run the following command:

$ flightctl get vuln --summary-only

The following output is an example:

CRITICAL  HIGH  MEDIUM  LOW  UNKNOWN  TOTAL
3         12    45      28   2        90

Run the following command:

$ flightctl get vuln

To sort results, add --sort-by and --order, as in the following examples:

$ flightctl get vuln --sort-by cvssScore --order desc
$ flightctl get vuln --sort-by publishedAt --order desc

Run the following command:

$ flightctl get vuln device/<device_name>

To include a severity summary before the CVE list, add --summary:

$ flightctl get vuln device/<device_name> --summary

To show only the summary, use --summary-only:

$ flightctl get vuln device/<device_name> --summary-only

Run the following command:

$ flightctl get vuln fleet/<fleet_name>

You can use --summary or --summary-only with fleet queries the same way as for devices.

To see affected fleets and device counts for one CVE, run the following command:

$ flightctl get vuln CVE-2023-44487

The output includes severity, CVSS score, advisory ID, a link to the Red Hat Security portal or NVD, and per-fleet affected device counts.

Run the following command:

$ flightctl get devices --cve-id CVE-2023-44487

To combine --cve-id with label selectors or other supported --field-selector values, use commands such as the following:

$ flightctl get devices --cve-id CVE-2023-44487 --selector region=us-west
$ flightctl get devices --cve-id CVE-2023-44487 --field-selector "metadata.owner notcontains Fleet/"