Commit ad9465c6 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Updated the wording in KEV_EXPLOIT-1 

Closes #503
parent abd765cb

EN-304-621.md

+1 −1
Original line number Diff line number Diff line
@@ -1193,7 +1193,7 @@ Depending on the chosen delivery method, the maintenance of the operating system 


> NOTE: Note that a container hosting the product always has an operating system.



* **KEV_EXPLOIT-1** If automateable vulnerability scanners are available the product shall satisfy the following with respect to the most comprehensive of such scanners:

* **KEV_EXPLOIT-1** If automatable or other vulnerability scanner types are available, the product shall satisfy the following with respect to the most comprehensive capabilities of such scanners:

    * The product shall have no known exploitable vulnerabilities discovered by scans.

    * For each identified exploitable vulnerability, the product shall have the risk mitigated.

    * The used vulnerability scanner shall be fit for the purpose in detail, method and depth.