Version fingerprinting is the process of inferring which software or software release a system uses from clues it exposes, such as HTTP headers, error messages, protocol responses, or service banners. Security teams use these clues to inventory systems and prioritize checks against known vulnerabilities.
Attackers may fingerprint public-facing services to find versions that could be vulnerable, while defenders use the same technique for initial triage. It is not definitive: banners can be hidden or altered, and vendors may backport security fixes without changing the visible version number. Treat fingerprints as leads, then confirm the deployed runtime and patch state through trusted configuration or controlled validation.