Vulnerability Intelligence
CVE Lifecycle and Vulnerability Records
Read CVE and NVD records as evolving evidence about a vulnerability, affected products, severity, exploitation, and remediation.
Category
Vulnerability Intelligence
Threat-informed methods for prioritizing vulnerabilities, exposure, mitigation, and remediation decisions.
7 resources
Resources in this category
Browse all resources
Vulnerability Intelligence
Third-Party Vulnerability Exposure: How to Decide Which Supplier Risk Is Urgent
Move from a supplier vulnerability headline to an evidence-based decision using dependency, access, data, exploit activity, controls, and recovery options.
Vulnerability Intelligence
Patch, Mitigate, or Accept: How to Choose a Vulnerability Response
Compare remediation options through exposure, consequence, exploit evidence, control effectiveness, operational cost, reversibility, and residual risk.
Vulnerability Intelligence
Exploit Proof of Concept: How to Decide Whether It Changes Priority
Evaluate exploit claims, prerequisites, reliability, weaponization, affected versions, and local reachability without running untrusted code casually.
Vulnerability Intelligence
Zero-Day Response: How to Decide What to Do Before a Patch Exists
Assess relevance, exposure, exploitation evidence, consequence, and reversible controls when a newly disclosed vulnerability has no complete fix.
Vulnerability Intelligence
CVSS vs EPSS vs KEV: Which Signal Should Drive Vulnerability Priority?
Use CVSS for technical severity, EPSS for near-term exploitation probability, KEV for confirmed exploitation, and local context for the remediation decision.
Vulnerability Intelligence
Vulnerability Intelligence: How to Prioritize What to Fix First
Turn vulnerability data into remediation decisions by combining technical severity, exploitation evidence, exposure, asset importance, likely impact, controls, and operational constraints—...