Cybersecurity vulnerability management systems and method

1. A computer-implemented method for managing cybersecurity vulnerabilities of resources within at least one network, the method comprising:

collecting, by at least one processor over a network, data pertaining to multiple network resources, the data including application risk rank and network location;

utilizing the at least one processor to manage cybersecurity vulnerabilities within the network by performing operations including;

determining vulnerability scores corresponding to vulnerabilities of the network resources;

determining severity scores for the network resources based on the application risk rank and network location of the network resources; and

integrating each vulnerability score and a corresponding severity score for the network resources to create a two-dimensional risk ranking; and

prioritizing remediation of the vulnerabilities within the network based on the two-dimensional risk ranking.

2. The method of claim 1 , further comprising calculating a vulnerability index as a weighted sum of vulnerabilities associated with an application and host.

3. The method of claim 2 , further comprising generating a user interface displaying a comparison of an infrastructure vulnerability index and an application vulnerability index.

4. The method of claim 1 , further comprising scheduling remediation of vulnerabilities based on the two-dimensional risk ranking.

5. The method of claim 1 , further comprising providing a user interface facilitating one-click generation of a prioritized remediation list.

6. The method of claim 1 , further comprising matching a vulnerability on the remediation list with a pre-determined patch for remediating the vulnerability.

7. The method of claim 6 , further comprising automatically applying the patch to impacted network hosts.

8. The method of claim 1 , wherein determining severity scores comprises determining a weight associated with a risk rank and a weight associated with a network location and summing the weights to calculate a total severity weight.

9. The method of claim 8 , further comprising associating the total severity weight with a corresponding severity score.

10. The method of claim 1 , further comprising generating a user interface displaying network hosts impacted by a selected vulnerability.

11. A cybersecurity vulnerability management system operating within at least one network, the system comprising:

at least one input processing engine for collecting data including application risk rank and network location;

at least one computer memory storing instructions;

at least one computer processor accessing the stored instructions and the collecting data for performing steps including:

determining vulnerability scores corresponding to vulnerabilities of network resources;

determining severity scores for the network resources based on the application risk rank and network location of the network resources;

integrating each vulnerability score and a corresponding severity score to create a two-dimensional risk ranking; and

prioritizing remediation of the vulnerabilities within the network based on the two dimensional risk ranking.

12. The system of claim 11 , further comprising calculating a vulnerability index as a weighted sum of vulnerabilities associated with an application and a host.

13. The system of claim 12 , wherein prioritization engine generates a user interface displaying a comparison of an infrastructure vulnerability index and an application vulnerability index.

14. The system of claim 11 , further comprising scheduling remediation of vulnerabilities based on the two-dimensional risk ranking.

15. The system of claim 11 , wherein a prioritization implementation engine generates a user-interface facilitating one-click generation of a prioritized remediation list.

16. The system of claim 11 , further comprising a remediation engine matching a vulnerability on the remediation list with a pre-determined patch for remediating the vulnerability.

17. The system of claim 16 , wherein the remediation engine automatically applies the patch to prioritized impacted network hosts.

18. The system of claim 11 , wherein a severity score calculator determines severity scores by determining a weight associated with a risk rank and a weight associated with a network location and summing the weights to calculate a total severity weight.

19. The system of claim 18 , wherein the severity score calculator associates the total severity weight with a corresponding severity score.

20. A non-transitory computer-readable medium, executed by a processor for managing cybersecurity vulnerabilities of resources within at least one network by performing steps including:

collecting data pertaining to multiple network resources, the data including application risk rank and network location;

determining vulnerability scores corresponding to vulnerabilities of the network resources;

determining severity scores for the network resources based on the application risk rank and network location; and

integrating the vulnerability score and the severity score to create a two-dimensional risk ranking; and

prioritizing remediation of the vulnerabilities based on the two-dimensional risk ranking.