Abstract: In order to improve the overall prevention ability of railway industry against network security threats and vulnerabilities, enhance the management level of railway system operation and maintenance, and implement the closed loop management to network security threats and vulnerabilities in the whole life cycle, this article proposed a railway network security threats and vulnerability management platform.Through the research of vulnerability repair priority algorithm, security threats and vulnerability dynamic update technology, the article designed overall architecture of the platform, network architecture, main functions and application scenarios.It can provide reference for the establishment of railway network security threat and vulnerability management system, and the construction of industry vulnerability knowledge base and patch database.