> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/recast-cvss-scores-and-cvss-severities.md).

# Recast CVSS scores and CVSS severities

In some situations, you might decide that a specific vulnerability poses a different level of risk to your environment than what is reflected in the original CVSS score or CVSS severity. In Cortex XSIAM you can override the CVSS score or severity within the platform. Customizing CVSS scores and severities enables you to align your risk management approach with your unique context and priorities.

When a CVSS score or severity is recast, the change is applied platform-wide, updating both existing and new vulnerability findings. This ensures consistency in how vulnerabilities are assessed and managed across the organization. After the CVSS score or severity is updated, the system automatically updates all affected findings within about one hour.

You can view the original CVSS score and severity and new values on the vulnerability details page in Vulnerability Intelligence.

{% hint style="info" %}
Score changes do not occur in real time. Updates are triggered only when a Findings update takes place.
{% endhint %}

## How to recast the CVSS score and CVSS severity of a vulnerability

1. Navigate to **Home > Modules > Vulnerability & Exposure Management > Vulnerability Intelligence**.
2. Use the filters to find the vulnerability in the **Vulnerability Intelligence** table.
3. Click in the row for the vulnerability to open the vulnerability details panel.
4. Click the Options icon in the upper right corner and select **Override Severity or CVSS**.
5. Enter the new severity and score, and then click **Save**.

<details>

<summary>View vulnerabilities with overridden CVSS severities and scores</summary>

Perform these steps to display the complete list of vulnerabilities with overridden CVSS severities and CVSS scores.

1. Navigate to **Posture Management** → **Vulnerability Management** → **Vulnerability Intelligence**.
2. Click the **Show Overridden CVSS** button in the upper right corner.

   You could also use the filter **Severity Source** *Contains* **Custom Override** to display the list of vulnerabilities with overrides.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/recast-cvss-scores-and-cvss-severities.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.