> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Accepting CVE Risks

> Accept CVE vulnerability risks in Iru Endpoint when patching is not feasible. Document risk acceptance decisions, set expiration dates, and track exceptions.

<Callout icon="list-check" color="#71118C" iconType="regular">This guide applies to Mac computers and Windows devices</Callout>

### About Accepting CVE Risks

When managing vulnerabilities in your environment, you may need to accept certain Common Vulnerabilities and Exposures (CVE) risks based on your organization's security posture and business requirements. Iru Endpoint provides flexible options for accepting risks either indefinitely or for a specific timeframe.

Please see our [Vulnerability Management Overview](/en/endpoint/vulnerability-management/vulnerability-management-overview) article for more information about vulnerabilities.

### How It Works

CVE risk acceptance allows you to acknowledge vulnerabilities that you've determined are acceptable for your environment. When you accept a CVE risk, notifications and log events for that vulnerability are suppressed, but you can reverse the decision at any time to resume monitoring.

Once you've accepted a CVE risk, the system automatically suppresses notifications and log events for that specific vulnerability. This helps reduce noise in your security monitoring while maintaining visibility into the decision-making process. You can track all risk acceptance decisions through the Vulnerability Management interface and on the [Unified Activity](/en/iru/platform-overview/unified-activity), and easily reverse them when your security posture changes.

### CVE Risk Acceptance Options

When you review CVEs in Vulnerability Management, you can assess each one based on factors like severity, exploitability, and how it relates to your business needs. Sometimes, you might decide not to remediate a CVE right away. For example, maybe the latest patch isn't available yet, the issue is low priority, or the affected application is essential to your workflow and you've decided the risk is acceptable for now.

Iru Endpoint gives you two options for accepting CVE risks:

* **Accept risk indefinitely** - This permanently acknowledges the risk for the selected CVE. Notifications and log events for that CVE will be suppressed.
* **Accept risk until a specific date** - This temporarily accepts the risk until the date you choose. After that date, the CVE returns to active status, and notifications and log events resume.

You can also reverse your decision at any time. If you "un-accept" the risk, the CVE is treated as active again, and notifications and log events will start up where they left off.

### Accepting a CVE Risk

<Steps>
  <Step title="Navigate to Vulnerability Management">
    Go to the **Vulnerability Management** section in the Iru Endpoint web app.
  </Step>

  <Step title="Select the CVE">
    Select the CVE you want to manage.
  </Step>

  <Step title="Open Accept Risk Tab">
    Select the **Accept Risk** tab.
  </Step>

  <Step title="Choose Acceptance Type">
    Choose to accept the risk either indefinitely or until a specific date.
  </Step>

  <Step title="Add Optional Details">
    Optionally, fill out the **Ticketing link** and **Comment** fields.
  </Step>

  <Step title="Accept the Risk">
    Click **Accept risk**.
  </Step>
</Steps>

Once accepted, Slack notifications and regular log events for that CVE will be suppressed. A log event will be created to record your action, including whether the acceptance is indefinite or has an expiration date. View it on the [Unified Activity](/en/iru/platform-overview/unified-activity).

### Un-accepting a CVE Risk

<Steps>
  <Step title="Navigate to Vulnerability Management">
    Go to the **Vulnerability Management** section in the Iru Endpoint web app.
  </Step>

  <Step title="Select the CVE">
    Select the CVE you want to manage.
  </Step>

  <Step title="Open Accept Risk Tab">
    Select the **Accept Risk** tab.
  </Step>

  <Step title="Start Un-accept Process">
    Click **Un-accept risk**.
  </Step>

  <Step title="Add Optional Details">
    Optionally, fill out the **Ticketing link** and **Comment** fields.
  </Step>

  <Step title="Confirm Un-acceptance">
    Click **Confirm**.
  </Step>
</Steps>

### CVE Status Filters

If you want to see which CVEs have accepted risks, use the **Status** filter in the Vulnerability Management interface and select **Risk accepted**. You’ll see a list of all CVEs with accepted risks, along with details about how long the acceptance lasts.

### CVE Timeline

If you later decide to un-accept the risk, the CVE will go back to being treated as active. The timeline tab within the CVE detail view will show both the previous **Risk accepted** status and the current status.