> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/investigate-and-remediate-vulnerabilities.md).

# Investigate and remediate vulnerabilities

Cortex XDR provides several ways to view and track vulnerability data so you can monitor, investigate, and remediate vulnerabilities in your environment.

## **View all Vulnerabilities**

The **Vulnerabilites** page displays all your vulnerabilities grouped by CVE or other vulnerability ID. This view shows you how prevalent each vulnerability is in your environment. The **Vulnerabilities** page includes key information about each vulnerability, with links to the related lists of instances (also called findings), related issues, and impacted assets.

Go to **Posture Management** → **Vulnerability Management** → **Vulnerabilities**.

## **View vulnerability issues**

The **Vulnerability Issues** page displays all vulnerability issues along with critical vulnerability intelligence and context so you can assign an issue to an owner, investigate, remediate, and track progress. Follow the steps below to view Vulnerability Issues and investigate them further:

1. Go to **Posture Management** → **Vulnerability Management** → **Vulnerability Issues**. Click on an issue in the table to display the issue details panel. You can also optionally generate a .tsv file export of the data if required from the Vulnerability Issues page.
2. The **Overview** tab on the Vulnerability Issues panel captures all the relevant details to further investigate the vulnerability including **Summary**, **Vulnerable Asset and Code Details**, **Security Controls**, and **Remediation Steps**. In addition, you can further isolate the vulnerability by examining the **Exposure Graph**. Use the graph to investigate relationships between K8s Namespaces, Clusters, Workloads, and Container Images.

   ![exposure-graph.png](/files/0JTCzklZviiRbKOFdAWI)
3. Review the Exposure Graph to understand where the vulnerability originates and how it impacts Findings and Assets. Select **More Info** to view granular details about each of the impacted assets.
4. You can also select **View Details** from the Details view to be directed to the Finding or Asset in question.

## **View All Vulnerability Findings**

A vulnerability finding is a specific instance of a vulnerability that was discovered in your environment. The **All Vulnerability Findings** page lists every instance of every vulnerability that was discovered in your environment.

Go to **Posture Management** → **Vulnerability Management** → **Vulnerability Issues** and click the **All Vulnerability Findings** button.

## **View vulnerable assets**

The **Vulnerable Assets** page displays all assets with a vulnerability finding. This view enables you to prioritize vulnerabilities by asset and asset type and focus on assets most critical to fix. The **Vulnerable Assets** list provides links to the findings and issues for each asset. Click on an asset in the table to see the asset details.

Go to **Posture Management** → **Vulnerability Management** → **Vulnerable Assets**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/vulnerability-management/investigate-and-remediate-vulnerabilities.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.