Manage attack surface tests - Administrator Guide - Cortex XSIAM - Cortex

Manage attack surface tests - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product

Cortex XSIAM

Creation date

2025-07-15

Last date published

2026-06-11

Category

Administrator Guide

View information about the available attack surface tests, and enable or disable tests on the Vulnerability Testing page. By default all tests are enabled.

Navigate to Modules → Attack Surface → Policies → Attack Surface Tests.
Filter and sort the list of tests as needed to identify the tests you want to enable or disable.
Select one or more tests using the check boxes, and right click to Enable or Disable them.

Field	Description
Affected Software	Software names and versions impacted by this vulnerability.
CWE IDs	Common Weakness Enumeration ID as defined by MITRE.
Created	When Cortex XSIAM released this test.
EPSS Score Description	The Exploit Prediction Scoring System (EPSS) score indicates the likelihood that a vulnerability will be exploited in the wild. Possible values are 0 -100%.the higher the score, the greater the probability that a vulnerability will be exploited.
References	Research references and supporting documentation.
Remediation Guidance	Recommended steps for remediating or mitigating the vulnerability.
Severity Score	The CVE severity score is based on the NIST Common Vulnerability Scoring System (CVSS).
Services Found Vulnerable	The number of directly-discovered services owned by your organization that Cortex XSIAM has confirmed vulnerable with this test.
Status	Indicates whether the test is Enabled or Disabled.
Vendor Names	Name of the vendor whose product is impacted by the vulnerability.
Vulnerability IDs	CVE number or other public identifier for the vulnerability.