A structured report on a specific CVE including its CVSS score, EPSS probability, CISA KEV membership status, and links to public exploits, enabling rapid triage of industrial product vulnerabilities.
The agent identifies the target CVE ID and queries the Ansvar MCP server using tools like get_cve_details, check_kev_status, and get_epss_score. It verifies data freshness via get_data_freshness to ensure the KEV and EPSS states are current. The agent then compiles the structured records into a clear summary for the user, highlighting critical risk indicators.
- Category: Operations and infrastructure
- Effect: Read-only
- MCP servers: Ansvar AI MCP (https://koskamo.com/explore/ansvar-ai-mcp)
- Source: Vulnerability intelligence · Ansvar AI docs (https://docs.ansvar.eu/docs/guides/vulnerability-intelligence)
- Source quote: "Your assistant gets structured records, not prose: the CVE, its severity score, whether it is on CISA's list of known exploited vulnerabilities, how likely exploitation is, and links to the source."
- Playbook page: https://koskamo.com/explore/use-cases/assess-cve-exploitability-and-kev-status
Prompt: Look up CVE-2024-3400: give me the CVSS score, whether it is in CISA KEV and its due date, the EPSS score, and any public exploits. Tell me when each feed last synced.