> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/vunerability-management/recast-cvss-scores-and-cvss-severities.md).

# Recast CVSS scores and CVSS severities

Customize CVSS scores and CVSS severities in the platform to align your risk management approach with your organizational context and priorities.

In some situations, you might decide that a specific vulnerability poses a different level of risk to your environment than what is reflected in the original CVSS score or CVSS severity. In Cortex Cloud you can override the CVSS score or severity within the platform. Customizing CVSS scores and severities enables you to align your risk management approach with your unique context and priorities.

When a CVSS score or severity is recast, the change is applied platform-wide, updating both existing and new vulnerability findings. This ensures consistency in how vulnerabilities are assessed and managed across the organization. After the CVSS score or severity is updated, the system automatically updates all affected findings within about one hour.

You can view the original CVSS score and severity and new values on the vulnerability details page in Vulnerability Intelligence.

## How to recast the CVSS score and CVSS severity of a vulnerability

1. Navigate to **Posture Management** → **Vulnerability Management** → **Vulnerability Intelligence**.
2. Use the filters to find the vulnerability in the **Vulnerability Intelligence** table.
3. Click in the row for the vulnerability to open the vulnerability details panel.
4. Click the Options icon in the upper right corner and select **Override Severity or CVSS**.
5. Enter the new severity and score, and then click **Save**.

<details>

<summary>View vulnerabilities with overridden CVSS severities and scores</summary>

Perform these steps to display the complete list of vulnerabilities with overridden CVSS severities and CVSS scores.

1. Navigate to **Posture Management** → **Vulnerability Management** → **Vulnerability Intelligence**.
2. Click the **Show Overridden CVSS** button in the upper right corner.

   You could also use the filter **Severity Source** *Contains* **Custom Override** to display the list of vulnerabilities with overrides.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/vunerability-management/recast-cvss-scores-and-cvss-severities.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.