SYSTEMS, METHODS, AND COMPUTER READABLE MEDIA FOR REMEDIATING SECURITY VULNERABILITIES

1 . A method for operating a telemetry interception and analysis platform (TIAP) system, comprising:

generating, on a server comprising a database and a processor, a software build of materials (SBOM) used by an application being executed on a customer computer system, the SBOM comprising a plurality of components;

executing, on the server, a TIAP portal comprising a common vulnerabilities and exposures (CVE) service operative to receive CVEs from at least one CVE source;

receiving, at the TIAP portal, vulnerabilities from the at least one CVE source;

identifying, at the TIAP portal, vulnerable components within the SBOM; and

remediating, at the TIAP portal, the vulnerable components with fixed versions of the vulnerable components to produce an updated build of the application.

2 . The method of claim 1 , further comprising:

identifying, at the TIAP portal, fixed versions for the vulnerable components.

3 . The method of claim 2 , wherein said remediating comprises:

generating, at the TIAP portal, update commands that replace respective vulnerable component with the identified fixed versions thereof; and

updating, at the TIAP portal, the vulnerable components by executing the update commands.

4 . The method of claim 3 , further comprising:

generating, at the TIAP portal, a script that consolidates the update commands; and

executing, at the TIAP portal, the script to update all the vulnerable components that have fixed version available.

5 . The method of claim 1 , further comprising:

after said remediating has been performed, executing, at the TIAP portal, a CVE analysis on the updated build of the application; and

verifying, at the TIAP portal, that that no CVEs exist in the updated build of the application.

6 . The method of claim 1 , wherein only vulnerable components that are used by the application are remediated.

7 . A telemetry interception and analysis platform (TIAP) system, comprising:

a server comprising a database and a processor to run a TIAP portal comprising an event service operative to receive telemetry events from a TIAP runtime being executed on a customer computer system in conjunction with an application being executed on the customer computer,

wherein the TIAP portal comprises a common vulnerability and exposure (CVE) service operative to receive a plurality of CVEs, wherein the plurality of CVEs are stored in the database,

wherein the TIAP portal comprises a software build of materials (SBOM) service to:

generate a SBOM used by an application being executed on the customer computer system, the SBOM comprising a plurality of components; and

identify at least one component that is associated with at least one of the vulnerabilities;

wherein the TIAP portal comprises a remediation service to:

identify vulnerable components that have fixed equivalents; and

remediate the identified vulnerable components with fixed versions of the vulnerable components to produce an updated build of the application.

8 . The TIAP system of claim 7 , wherein the remediation service is operative to:

generate, at the TIAP portal, update commands that replace respective vulnerable component with the identified fixed versions thereof; and

update, at the TIAP portal, the vulnerable components by executing the update commands.

9 . The TIAP system of claim 8 , wherein the remediation service is operative to:

generate, at the TIAP portal, a script that consolidates the update commands; and

execute, at the TIAP portal, the script to update all the vulnerable components that have fixed version available.

10 . The TIAP method of claim 7 , after said remediating has been performed, the CVE service is operative to execute a CVE analysis on the updated build of the application; and

verifying, at the TIAP portal, that that no CVEs exist in the updated build of the application.

11 . The TIAP system of claim 7 , wherein only vulnerable components that are used by the application are remediated.

12 . A computer program product comprising at least one non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising an executable portion configured to:

generate, on a server comprising a database and a processor, a software build of materials (SBOM) used by an application being executed on a customer computer system, the SBOM comprising a plurality of components;

execute, on the server, a TIAP portal comprising a common vulnerabilities and exposures (CVE) service operative to receive CVEs from at least one CVE source;

receive, at the TIAP portal, vulnerabilities from the at least one CVE source;

identify, at the TIAP portal, vulnerable components within the SBOM; and

remediating, at the TIAP portal, the vulnerable components with fixed versions of the vulnerable components to produce an updated build of the application.

13 . The computer program product of claim 12 , wherein the computer-readable program code portions comprise the executable portion configured to:

identify, at the TIAP portal, fixed versions for the vulnerable components.

14 . The computer program product of claim 13 , wherein the computer-readable program code portions comprise the executable portion configured to:

generate, at the TIAP portal, update commands that replace respective vulnerable component with the identified fixed versions thereof; and

update, at the TIAP portal, the vulnerable components by executing the update commands.

15 . The computer program product of claim 14 , wherein the computer-readable program code portions comprise the executable portion configured to:

generate, at the TIAP portal, a script that consolidates the update commands; and

execute, at the TIAP portal, the script to update all the vulnerable components that have fixed version available.

16 . The computer program product of claim 12 , wherein the computer-readable program code portions comprise the executable portion configured to:

after said remediating has been performed, execute, at the TIAP portal, a CVE analysis on the updated build of the application; and

verify, at the TIAP portal, that that no CVEs exist in the updated build of the application.

17 . The computer program product of claim 12 , wherein only vulnerable components that are used by the application are remediated.