windows-itpro-docs/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-tvm-softwarevulnerability-table.md

title, description, keywords, search.product, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.author, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic, ms.date

title	description	keywords	search.product	search.appverid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.author	author	ms.localizationpriority	manager	audience	ms.collection	ms.topic	ms.date
DeviceTvmSoftwareVulnerabilitiesKB table in the Advanced hunting schema	Learn about the DeviceTvmSoftwareVulnerabilitiesKB table in the Advanced hunting schema, such as CVE ID, CVSS score, exploit availability, vulnerability severity, last modified time, date the vulnerability was disclosed to public, and affected software in your network.	advanced hunting, atp query, device management, query atp data, query tvm data, query software vulnerability inventory, intellisense, atp telemetry, events, events telemetry, azure log analytics, description, DeviceTvmSoftwareVulnerabilitiesKB	eADQiWindows 10XVcnh	met150	w10	deploy	library	security	dolmont	DulceMontemayor	medium	dansimp	ITPro	M365-security-compliance	article	10/27/2019

DeviceTvmSoftwareVulnerabilitiesKB

Applies to:

• Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

Want to experience Microsoft Defender ATP? Sign up for a free trial.

[!includePrerelease information]

The DeviceTvmSoftwareInventoryVulnerabilities table in the Advanced hunting schema contains information about the vulnerabilities Threat & Vulnerability Management assesses devices for. Use this reference along with DeviceTvmSoftwareInventoryVulnerabilities to construct queries that return information on the metadata related to the vulnerabilities in your inventory.

For information on other tables in the Advanced hunting schema, see the Advanced hunting reference.

Column name	Data type	Description
CveId	string	Unique identifier assigned to the security vulnerability under the Common Vulnerabilities and Exposures (CVE) system
CvssScore	string	Severity score assigned to the security vulnerability under th Common Vulnerability Scoring System (CVSS)
IsExploitAvailable	boolean	Indicates whether exploit code for the vulnerability is publicly available
VulnerabilitySeverityLevel	string	Severity level assigned to the security vulnerability based on the CVSS score and dynamic factors influenced by the threat landscape
LastModifiedTime	datetime	Date and time the item or related metadata was last modified
PublishedDate	datetime	Date vulnerability was disclosed to public
VulnerabilityDescription	string	Description of vulnerability and associated risks
AffectedSoftware	string	List of all software products affected by the vulnerability

Related topics

• Advanced hunting overview
• All Advanced hunting tables
• Advanced hunting query best practices
• Query data using Advanced hunting