> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/use-cases/secure-the-infrastructure/prioritize-and-fix-vulnerabilities.md). # Prioritize and Fix Vulnerabilities It's difficult even for seasoned security professionals to properly prioritize vulnerabilities as it’s a complex process that must take many factors into consideration, including the severity of the vulnerability, the likelihood of exploitation, the impact of a successful attack and specific environment and even workload configurations. Teams that have tried to implement vulnerability prioritization through manual efforts reported it to be a time-consuming, impossible to win task because practitioners found themselves to have **limited visibility into vulnerabilities** as data comes from various sources, such as software vendors, open-source projects, and third-party applications, operational systems, service orchestrators, cloud service providers among others and correlating all this data is an impossible task if approached manually. To help security teams like yours to better identify their most impacting vulnerabilities and take action, Prisma Cloud Unified Vulnerability Management (UVM) continuously monitors the entire application lifecycle (Code, Build, Deploy, and Runtime) to find all the vulnerabilities, and based on risk and runtime factors, prioritizes them in a way that allows users to quickly take action . ## 1. Onboard Your Cloud Accounts, Repositories, and Container Image Registries Make sure to onboard your [AWS](https://docs.prismacloud.io/en/enterprise-edition/content-collections/connect/connect-cloud-accounts/onboard-aws/onboard-aws), [Azure](https://docs.prismacloud.io/en/enterprise-edition/content-collections/connect/connect-cloud-accounts/onboard-your-azure-account/onboard-your-azure-account), or [GCP](https://docs.prismacloud.io/en/enterprise-edition/content-collections/connect/connect-cloud-accounts/onboard-gcp/onboard-gcp) accounts where you have your runtime workloads and make sure you have Prisma Cloud Agentless Workload Scanning or [Prisma Cloud Runtime Security agents](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/install/deploy-defender/defender-types) deployed. ### Agentless Workload Scanning Confirm that you do not have errors with the [additional permissions](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/configure/permissions) required for [Agentless Scanning](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/agentless-scanning/onboard-accounts/onboard-accounts) . ![](/files/hCoKdz9jYjeLNVkL8Bvo) **Agent Base Protection** Confirm that the [Defender agent](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/install/deploy-defender/deploy-defender) is operational and scanning your environment ![](/files/QvfNkK58ULcD5PomdVwf) ### Repositories Confirm that the [repositories](https://docs.prismacloud.io/en/enterprise-edition/content-collections/application-security/get-started/connect-code-and-build-providers/code-repositories/code-repositories) hosting the artifacts used by the applications are onboarded ![](/files/SVh0ifJvhmiVAxcOPYZl) ### Container Image Registries Confirm that the [image registries](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/vulnerability-management/registry-scanning/configure-registry-scanning) hosting your application images are scanned for vulnerabilities ![](/files/oVadhlKk5soWlvp8EyoN) ## 2. Analyze your Vulnerability Landscape Identify and understand the most critical vulnerabilities facing your organization. The out-of-the-box [Vulnerability policies](https://docs.prismacloud.io/en/enterprise-edition/content-collections/runtime-security/vulnerability-management/vulnerability-management-policies) help you prioritize and address these risks efficiently. 1. Select Dashboards. 2. Look into the Top Impacting Vulnerabilities. 3. Click on the vulnerability at the top of the widget. Now, you can explore the different vulnerabilities impacting your organization and take action accordingly. ![](/files/FneYy24kFikEnGWIV8UT) ## 3. Understand the Code to Cloud Impact of the Vulnerability 1. Verify all the assets affected by the vulnerability (optional) 2. Click on the vulnerability icon and click on the *"View Details"* button ![](/files/liXokOLNLAQcm03pHjEr) 1. On the Vulnerability Sidecar, click on **Assets**. 2. Review all the Assets Types affected by the selected vulnerability (optional). ![](/files/CgVDEyXacmPfRf0xJqb7) 1. On Packages, click on Actions and "Submit Pull Request" ![](/files/wMQpZG1SlRotWQNvUKvQ) ## 4. Take Action 1. 1. Download the vulnerability Data as a CSV 2. On the Vulnerability Sidecar, click on **Assets.** 3. Click on the **Download All Assets** button. ![](/files/Zv5CMcGLRSFMDh1DpKbB) 1. If you want to download vulnerability information from a specific asset type, expand the group of interest and click on the Download button located under that group. ![](/files/g8snTMdF5Us64YzpbTdp) 1. 1. Create a ticket in Jira. On the Vulnerability side panel, select **Send to > Jira.** Select your pre-defined template and send **.** See set up a [Jira](https://docs.prismacloud.io/en/enterprise-edition/content-collections/administration/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-jira) integration, if you need to set one up. ## 5. Investigate Vulnerabilities You can [dive deep](https://docs.prismacloud.io/en/enterprise-edition/content-collections/search-and-investigate/vulnerability-queries/vulnerability-query-examples) into your top issues and resolve these concerns to strengthen your overall security posture. 1. Enter an RQL Query for vulnerability Search. 1. Log in to the Prisma Cloud Console, and select **Investigate**.\ The Investigate page is where you can perform queries to find answers about your cloud resources and their vulnerabilities 2. Enter an RQL query to search for high and critical severity vulnerabilities that are older than 30 days For example: *vulnerability where AssetLifeCycle is Run AND Age >= 30 AND Severity in (Critical, High)* ![](/files/g67fqLfxdeQWOPZFF9Sw) Enter an RQL query to search for high and critical severity vulnerabilities that are older than 30 days 3. Clicking on any Vulnerability will take you directly to the Vulnerability sidecar where further actions can be taken as explored earlier. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.prismacloud.io/use-cases/secure-the-infrastructure/prioritize-and-fix-vulnerabilities.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.