Recast CVSS scores and CVSS severities - Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities. - Administrator Guide - Cortex CLOUD

Cortex Cloud Posture Management Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Posture Management
Creation date
2025-01-22
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities.

In some situations, you might decide that a specific vulnerability poses a different level of risk to your environment than what is reflected in the original CVSS score or CVSS severity. In Cortex Cloud you can override the CVSS score or severity within the platform. Customizing CVSS scores and severities enables you to align your risk management approach with your unique context and priorities.

When a CVSS score or severity is recast, the change is applied platform-wide, updating both existing and new vulnerability findings. This ensures consistency in how vulnerabilities are assessed and managed across the organization. After the CVSS score or severity is updated, the system automatically updates all affected findings within about one hour.

You can view the original CVSS score and severity and new values on the vulnerability details page in Vulnerability Intelligence.

How to recast the CVSS score and CVSS severity of a vulnerability
  1. Navigate to Posture ManagementVulnerability ManagementVulnerability Intelligence.

  2. Use the filters to find the vulnerability in the Vulnerability Intelligence table.

  3. Click in the row for the vulnerability to open the vulnerability details panel.

  4. Click the Options icon in the upper right corner and select Override Severity or CVSS.

  5. Enter the new severity and score, and then click Save.

Perform these steps to display the complete list of vulnerabilities with overridden CVSS severities and CVSS scores.

  1. Navigate to Posture ManagementVulnerability ManagementVulnerability Intelligence.

  2. Click the Show Overridden CVSS button in the upper right corner.

    You could also use the filter Severity Source Contains Custom Override to display the list of vulnerabilities with overrides.