Vulnerability applicability assessment and determination

A computer system comprising:

• a processor set;
• a set of one or more computer-readable storage media;
• and
• program instructions, collectively stored in the set of one or more computer-readable storage media, for causing the processor set to perform computer operations as follows:
• identify a vulnerability and a description of the vulnerability in a vulnerability report;
• extract a set of key exploit conditions for the vulnerability from the description of the vulnerability;
• generate a set of different code snippets for the set of key exploit conditions;
• search a set of repositories for a match between a set of components and the set of different code snippets to form a search result;
• and
• identify vulnerability assessment information relating to an applicability of the vulnerability in response to the match between the set of components and the set of different code snippets in the search result;
• search a set of sources for the vulnerability assessment information related to the applicability of the vulnerability in response to the search result indicating that the vulnerability has been detected for the set of components in the set of repositories;
• generate, by the processor set, a summary of the vulnerability assessment information from the set of sources for reasons for inaction on the vulnerability;
• analyze the summary to identify why the vulnerability is inapplicable for a particular situation;
• and
• determine, based on the analyzing, whether any remediation actions are needed with respect to the vulnerability located for the set of components in the set of repositories.

A computer program product for processing vulnerabilities, the computer program product comprising:

• a set of one or more computer-readable storage media;
• program instructions, collectively stored in the set of one or more computer-readable storage media, for causing a processor set to perform computer operations as follows:
• identify a vulnerability and a description of the vulnerability in a vulnerability report;
• extract a set of key exploit conditions for the vulnerability from the description of the vulnerability;
• generate a set of different code snippets for the set of key exploit conditions;
• search a set of repositories for a match between a set of components and the set of different code snippets to form a search result;
• and
• identify vulnerability assessment information relating to an applicability of the vulnerability in response to the match between the set of components and the set of different code snippets in the search result;
• search a set of sources for the vulnerability assessment information related to the applicability of the vulnerability in response to the search result indicating that the vulnerability has been detected for the set of components in the set of repositories;
• generate a summary of the vulnerability assessment information from a set of sources for reasons for inaction on the vulnerability;
• analyze the summary to identify why the vulnerability is inapplicable for a particular situation;
• and
• determine, based on the analyzing, whether any remediation actions are needed with respect to the vulnerability located for the set of components in the set of repositories.