Post patching , SCCM missed to check the Registry or DLL setting on servers to confirm whether a particular patch is applied successfully or not . Without checking this , we cannot confirm the patch compliance report.
Due to which lot of vulnerabilities exists .