STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 4 Release: 5 Benchmark Date: 01 Jul 2026:

The web server must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs).

DISA Rule

SV-206443r1138080_rule

Vulnerability Number

V-206443

Group Title

SRG-APP-000456

Rule Version

SRG-APP-000456-WSR-000187

Severity

CAT II

CCI(s)

• CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Install security-relevant web server updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs).

Check Contents

Verify the web server installs security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs).

If security-relevant software updates to the web server are not installed within 30 days, unless the time period is directed by an authoritative source, this is a finding.

Vulnerability Number

V-206443

Documentable

False

Rule Version

SRG-APP-000456-WSR-000187

Severity Override Guidance

Verify the web server installs security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs).

If security-relevant software updates to the web server are not installed within 30 days, unless the time period is directed by an authoritative source, this is a finding.

Check Content Reference

M

Target Key

2910