performing-cve-prioritization-with-kev-catalog

What problem does it solve? Security teams face thousands of CVEs from vulnerability scans and cannot patch everything at once. This Skill ranks vulnerabilities by real-world exploitation evidence instead of raw CVSS severity, so teams fix actively exploited flaws first. ## Core Features & Use Cases - KEV Catalog Integration: Fetches and parses the CISA Known Exploited Vulnerabilities JSON feed, including ransomware-use flags and BOD 22-01 due dates. - Multi-Factor Risk Scoring: Combines KEV listing (30%), EPSS probability (25%), CVSS base score (20%), asset criticality (15%), and network exposure (10%) into a composite risk score. - Priority Assignment with SLAs: Maps vulnerabilities to P1-Emergency through P5-Low tiers with remediation deadlines from 48 hours to 90 days. - Use Case: A security analyst exports Nessus scan results, runs the prioritization engine, and produces a CSV report showing which CVEs are KEV-listed, ransomware-associated, and require patching within 48 hours. ## Quick Start Ask the agent to fetch the CISA KEV catalog, enrich your vulnerability scan results with EPSS scores, and generate a prioritized remediation report sorted by risk score.