SupportConsoleDevelopersStart a trialContact

Chapter 3. Reports by CVEs

You can create PDF reports showing a filtered list of CVEs your systems are exposed to. Give each report a relevant name, apply filters, and add user notes to present focused data to specific stakeholders.

You can apply the following filters when setting up the PDF report:

  • Security rules. Show only CVEs with the security rules label.
  • Known exploit. Show only CVEs with the Known exploit label.
  • Severity. Select one or more values: Critical, Important, Moderate, Low, or Unknown.
  • CVSS base score. Select one or more ranges: All, 0.0-3.9, 4.0-7.9, 8.0-10.0, N/A (not applicable).
  • Business risk. Select one or more values: High, Medium, Low, Not defined.
  • Status. Select one or more values: Not reviewed, In review, On-hold, Scheduled for patch, Resolved, No action - risk accepted, Resolved via mitigation.
  • Publish date. Select from All, Last 7 days, Last 30 days, Last 90 days, Last year, or More than 1 year ago.
  • Applies to OS. Select the RHEL minor version(s) of systems to filter and view.
  • Tags. Select groups of tagged systems.
  • Advisory. Select whether to display only CVEs that have associated advisories (errata), only CVEs without advisories, or all CVEs.

The CVE report lists the CVEs and links each to its corresponding CVE page in the Red Hat CVE database. The list is ordered primarily by the CVE’s publication date, with the most recently published CVEs at the top.

3.1. Create a PDF report of CVEs
Copy link

You can create a point-in-time snapshot of CVEs that potentially affect your systems.

Prerequisites

  • You must be logged in to Red Hat Hybrid Cloud Console.

Procedure

  1. Navigate to the Security > Vulnerability > Reports page in the Red Hat Lightspeed application.
  2. On the Report by CVEs card, click Create report.

  3. Make selections as needed in the pop-up card.

    1. Optional: Customize the report title.
    2. In the Filter CVEs by section, click each drop-down list and select a value.
    3. Select Tags to only include systems in a tagged group of systems.
    4. Under CVE data to include, Choose columns is activated by default, allowing you to clear columns you do not want to include. Leave all boxes checked, or click All columns to show everything.
    5. Optional: To provide context for the intended report audience, you can add notes.
  4. Click Export report. It can take at least one minute for the report to be generated.
  5. Select to open or save the PDF file, if you such request, and click OK.
Red Hat logoGithubRedditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

© 2026 Red HatBack to top