Running ZCM 23.4 AND 24.4. Both show up with the same error message: Error: Replication completed with error:"Unable to connect to NVD ". Nov 27, 2024 4:09:38 PM Error: Error: Timeout waiting for connection from pool Nov 27, 2024 4:09:38 PM Error: Error: Timeout waiting for connection from pool Nov 27, 2024 4:02:28 PM Error: Error: Timeout waiting for connection from pool Nov 27, 2024 3:55:18 PM INFO Determining URL to be processed... Nov 27, 2024 3:47:07 PM INFO Importing CVE Data Modified After:"Wed Nov 27 15:47:07 CET 2019". Nov 27, 2024 3:47:07 PM INFO Started replication session for subscription : "/Subscriptions/CVE-Patches-Abo" Nov 27, 2024 3:47:07 PM I even added a key but with no change of symptom... Any ideas?

See - https://www.nist.gov/itl/nvd Looks like the API Feed is having issues after some changes on the NIST Side. This is what we use.... While we will investigate to make sure nothing is amiss on our side after the changes....until the API Status Goes Green, there is a chance we may not work or may not work reliably. Hopefully they will get their capacity issues resolved soon, which is the most likely cause but again we will try and confirm to make sure we don't need any changes.

Does anyone has problems with importing cve data like I have?

UlliE 13 days ago

Running ZCM 23.4 AND 24.4.

Both show up with the same error message:

Error:	Replication completed with error:"Unable to connect to NVD ".	Nov 27, 2024 4:09:38 PM
Error:	Error: Timeout waiting for connection from pool	Nov 27, 2024 4:09:38 PM
Error:	Error: Timeout waiting for connection from pool	Nov 27, 2024 4:02:28 PM
Error:	Error: Timeout waiting for connection from pool	Nov 27, 2024 3:55:18 PM
INFO	Determining URL to be processed...	Nov 27, 2024 3:47:07 PM
INFO	Importing CVE Data Modified After:"Wed Nov 27 15:47:07 CET 2019".	Nov 27, 2024 3:47:07 PM
INFO	Started replication session for subscription : "/Subscriptions/CVE-Patches-Abo"	Nov 27, 2024 3:47:07 PM

I even added a key but with no change of symptom...

Any ideas?

"The only two mistakes that can be done on ones way to championship is to not getting started and to not continue until the end."

Top Replies

Craig Wilson 7 days ago +2 verified

See - https://www.nist.gov/itl/nvd Looks like the API Feed is having issues after some changes on the NIST Side. This is what we use.... While we will investigate to make sure nothing is amiss on our…
Craig Wilson 13 days ago +1

I would recommend a Support Ticket. I may be seeing the same for a few days going back in the logs. Not sure if something is down on the NVD site or what.... Since it will be Holidays for the US I will…
Craig Wilson 13 days ago in reply to UlliE +1

I doubt there is much you can do on your side....However, I did email Dev and Product Mgmt to have a look. As far as the case, I will leave it to folks who are actually working the next 2 days....

0 Craig Wilson 13 days ago

Did it just start? when was it last successful?

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Craig Wilson 13 days ago

I would recommend a Support Ticket. I may be seeing the same for a few days going back in the logs. Not sure if something is down on the NVD site or what....

Since it will be Holidays for the US I will leave it for others to pickup...However, I will send an Email to Dev to Examine....

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 UlliE 13 days ago in reply to Craig Wilson

I did already open a ticket: 03016840

"The only two mistakes that can be done on ones way to championship is to not getting started and to not continue until the end."
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 UlliE 13 days ago in reply to Craig Wilson

I can't tell, when the last succesful import was...

I just regcognized the error tag at the abo and then it didn't start up again.

I found a KB entry from Arvind and deleted the abo including the database cleanup - waited and created a new one: no change.

"The only two mistakes that can be done on ones way to championship is to not getting started and to not continue until the end."
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Craig Wilson 13 days ago in reply to UlliE

I doubt there is much you can do on your side....However, I did email Dev and Product Mgmt to have a look. As far as the case, I will leave it to folks who are actually working the next 2 days....

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Andy Konecny 13 days ago in reply to Craig Wilson

How can we tell when it was last successful? I am seeing the failure as well, but coming up blank on how to see this in the logs themselves.

________________________

Andy of KonecnyConsulting.ca in Toronto
Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Craig Wilson 13 days ago in reply to Andy Konecny

ZENLoader Logs will have details....

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Craig Wilson 7 days ago

FYI....I made a Dev Ticket for this issue...OCTCR40D836037 in case others want to track....

I will make a KB as well....

I suspect there is either an ongoing issue with the NVD Site....or they made some change....

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
Verified Answer

+1 Craig Wilson 7 days ago

See - https://www.nist.gov/itl/nvd

Looks like the API Feed is having issues after some changes on the NIST Side. This is what we use....

While we will investigate to make sure nothing is amiss on our side after the changes....until the API Status Goes Green, there is a chance we may not work or may not work reliably.

Hopefully they will get their capacity issues resolved soon, which is the most likely cause but again we will try and confirm to make sure we don't need any changes.

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up +2 Vote Down

Sign in to reply

Reject Answer

Cancel
0 Craig Wilson 6 days ago

I made a KB Today for the issue...

https://portal.microfocus.com/s/article/KM000036974?language=en_US

At this point, it will just be a matter of spamming retry with your fingers crossed until the API feed returns to a Green Status here -> https://www.nist.gov/itl/nvd

It seems there are upgrade related issues where NIST started trying to incorporate significantly more data into their system.

--

If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

Be sure to "Like" My (and a few others) Cool Solutions below!

https://community.microfocus.com/members/craigdwilson/bookmarks
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel

Menu

ZENworks Patch Management Discussions

Verified Answers

Does anyone has problems with importing cve data like I have?

Top Replies

Verified Answer

Resources