Assess CVE exploitability and KEV status
A structured report on a specific CVE including its CVSS score, EPSS probability, CISA KEV membership status, and links to public exploits, enabling rapid triage of industrial product vulnerabilities.
How it works
Read-onlyOperations and infrastructure
The agent identifies the target CVE ID and queries the Ansvar MCP server using tools like get_cve_details, check_kev_status, and get_epss_score. It verifies data freshness via get_data_freshness to ensure the KEV and EPSS states are current. The agent then compiles the structured records into a clear summary for the user, highlighting critical risk indicators.
Prompt
Paste this into an agent that has the servers below connected. Adjust the names and dates to your own.
Prompt for Assess CVE exploitability and KEV status
Look up CVE-2024-3400: give me the CVSS score, whether it is in CISA KEV and its due date, the EPSS score, and any public exploits. Tell me when each feed last synced.MCP servers it needs
Source
The vendor page this playbook is drawn from, and the passage that supports it.
Your assistant gets structured records, not prose: the CVE, its severity score, whether it is on CISA's list of known exploited vulnerabilities, how likely exploitation is, and links to the source.Vulnerability intelligence · Ansvar AI docs