> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/vunerability-management/emerging-vulnerabilities.md).

# Emerging Vulnerabilities

Leverage the Emerging Vulnerabilities page to simplify and streamline your response to global attack surface threat events and zero-day exploits. Aggregated data about the zero day threat and its impact on your organization is available one place, to help you access all the information you need to prioritize remediation. Use the Emerging Vulnerabilities page to:

* **Review a curated list of emergent and global threat events**, and quickly identify the events that impact your organization.
* **Research a threat event**. The Palo Alto Networks Security Research Team provides a threat summary, potential exploit consequences, previous exploit activity, and links to other reputable sources for additional information.
* **Assess the impact of a threat event on your organization**. Review a detailed list of the impacted assets, identify relevant incidents and alerts, and see how the risk is distributed across your organization.
* **Build a Remediation Plan**. Remediation guidance is available for each event, including lists of relevant alerts, and click-throughs to incident and alert pages to begin remediation.

<figure><img src="/files/7kBvNwjXPbogvpgMd8w3" alt=""><figcaption></figcaption></figure>

### Emerging Vulnerabilities Actions

Navigate to **Modules > Vulnerability & Exposure Management > Emerging Vulnerabilities** to view a detailed list of emerging zero-day threat events. The widgets here provide telemetry on how your cloud assets are impacted by the CVEs and outlines steps you can take to immediately remediate the issue. Widgets include:

* **Top Threats with Active Issues**: Counts all active issues related to the Emerging Vulnerability events.
* **Active Issues over Time**: Includes all issues that have CVE-IDs, Attack Surface Rules that are included in Emerging Vulnerability events. Click the options icon to change the timeframe.
* CVE Detailed View: This view provides a complete list of threat events and links to related alerts. For each event in the list, Cortex displays the following information, enabling you to quickly identify which events are the highest priority for your organization. The list can also be sorted any of the data points below.
  * Max CVSS Score—Highest CVSS score of the CVEs associated with the event.
  * Max Exploit Prediction Scoring System (EPSS) Score—Calculates the likelihood of exploits in the wild.
  * Active Issue Count—Number of your organization's active alerts related to this event.
  * Findings Count
  * CVEs—Number of CVEs related to this event.
  * Affected Software—Names of the software affected by this event. The Issue details page lists the affected versions.
  * Last Updated date
  * First Published date
  * Has Known Exploited Vulnerabilities (KEV) value—Denotes whether a specific software flaw is actively being attacked in the wild.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/vunerability-management/emerging-vulnerabilities.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.