[Important] NEW Vulnerability Dashboard on Open Platform Console

Dear Developers,

Context

To help you better manage vulnerabilities found in your IT assets and enhance Data Security for Shopee’s users, Shopee Open Platform has launched a new Vulnerability Dashboard.

This dashboard gives you an overview of all active and resolved vulnerabilities detected in your IT infrastructure, allowing you to quickly rectify them. With fewer vulnerabilities, we can work towards safer and more secure platforms for Shopee sellers.

With the new dashboard, you'll be able to prioritize vulnerabilities to resolve based on their severity. The 4 categories of severity each have a corresponding Service Level Agreement (SLA) lead time for rectification:

How to Use

To access the Vulnerability Dashboard, visit the Open Platform Console > select Vulnerability Dashboard under the Security section. You can view all detected vulnerabilities and their information such as severity, last detection date, and rectification deadline.

Select Detail to view more recommended actions under the Action Required section.

NOTE: Failure to abide by the rectification deadline set will result in penalties.

We hope this new feature will better support you in addressing vulnerabilities in your IT infrastructure. Thank you for your cooperation.

尊敬的开发者，

背景

为了帮助您更好管理平台从您的IT资产发现的漏洞，并提升虾皮用户的数据安全，虾皮开放平台搭建了一个新的漏洞看板。

此看板能帮助您了解您的 IT 基础架构中检测到的所有已解决和待处理的漏洞，使您能更快速进行修复。通过定期检查修复漏洞，我们可以为 Shopee 卖家打造更安全、更可靠的平台。

您能够根据漏洞的严重等级确定要解决的漏洞的优先级。 4 种严重等级对应的服务水平协议 (SLA) 整改期限：

如何使用

访问漏洞看板，请进入开放平台 Console > 选择 “Security” 模块下的“Vulnerability Dashboard”。您可以查看所有检测到的漏洞及其严重等级(Severity)、最后检测日期 (last detection date) 和整改期限(Rectification deadline)等信息。

点击 “Detail”， 查看我们的修复建议（“Action Required”）。

注意：未在整改最后期限（rectification deadline）之前完成漏洞修复可能会收到平台的惩罚

我们希望这个新功能能够更好地帮助您解决 IT 资产的漏洞。感谢您的合作！