How does X-Force determine which systems are affected by a particular security issue?
X-Force researchers systematically collect and read vulnerability disclosure reports, affected products’ advisories and Web sites, follow up messages, and other information to compile a list of affected platforms. Information regarding affected platforms and remedies often changes as new information appears and more vendors report whether their systems are vulnerable. For some high-priority issues, X-Force does independent testing to confirm which versions are and are not vulnerable.
