New Security Advisories Page

[PhoneBoy]

Thanks to @Uri_Lewitus and team, we are happy to announce a new page for Security Advisories that impact Check Point products:  https://support.checkpoint.com/security-advisories

The main thing that's new here is that we now have a single page that lists all the relevant disclosures versus being scattered across multiple sources. This is consistent with our CISA Pledge that includes a commitment to improving transparency. Also, this page does not require you to be logged into SupportCenter.

Key highlights:

• Clickable CVEs linking to SK articles or the Jumbo Hotfix book (unless Check Point is unaffected).
• 170+ CVEs imported so far, covering vulnerabilities since 2021 and all Security Alert-tagged SKs.
• Includes Third-Party & Check Point Software vulnerabilities.
• Ongoing Expansion with backlog CVEs being added based on priority.
• Search functionality is currently basic, though we plan to add advanced search, filters, and export options in the future.

[Lesley]

Yes! great work. Makes life more easy. 

[the_rock]

Great news! Awesome work.

Andy

[JoSec]

I mentioned this to my SE years ago about making it easier to find an applicable CVE . Thank you and about time.

[the_rock]

I mentioned it one time "in passing" when on phone with TAC and guy said to bring it up with SE. I did, but its been few years. Very happy its done now.

Andy

[JozkoMrkvicka]

Pretty please make it as RSS feed.

If new Advisory is published, will it be "Advisory # 1" and current Advisory #1 will be #2 ?

Would like to see some timestamp, like date of publish or date of fix in overview of every Advisory. Possible used for future filter/search.

[PhoneBoy]

As much as I'm with you on RSS feeds, I'm not aware of any concrete plans regarding them.
The Published/Update dates are actually there already on the page and you can sort by them (though it only shows date, not time). 

[Henrik_Noerr1]

Wow! I never thought I lived to see Check Point deliver a CVE page 🙂

Ok, no rss feed. So can you send a notif to a email when the site is updated?

Also let me filter out product suites like Harmony that we do not use.

Thanks,

Henrik

[PhoneBoy]

Filtering right now is very limited, as noted in the initial post.
If you subscribe to Security Alerts (something already possible), I believe it will get the content that appears on this page as well as everything on it links to an SK.

[the_rock]

Just the fact page is now available is AWESOME!

[MattGo]

A great start but as you mention, filtering is basic.  I can search for e.g. R81.20 but it would be great to be able to filter by JHF too, so I know what vulnerabilities a particular gateway might be susceptible to if downlevel.

[PhoneBoy]

That would definitely be a bonus.

[the_rock]

Agree there 100%...filtering by jumbo would be amazing.