Prioritization attributes

Last updated: Oct 27, 2026

---

In the Priority section of Policies, you can configure the order of priority attributes for vulnerability remediation. Fluid Attacks uses this order to calculate the priority rank of each vulnerability.

The number 1 is the most important attribute and 7 is the least important.

These are the available attributes:

• Transitivity: This attribute shows if the vulnerability is in a transitive dependency. A transitive dependency is a component that one of your direct dependencies uses. You do not control this component directly.
• Use: This attribute shows if your team uses the vulnerable component in development or in production. Vulnerabilities in production have a higher impact on your business and security.
• KEV: This attribute shows if the vulnerability is in the Known Exploited Vulnerabilities (KEV) catalog. CISA maintains this catalog. The catalog lists vulnerabilities that attackers exploited.
• % EPSS: This attribute shows the probability that attackers will exploit a vulnerability in the next 30 days. The Exploit Prediction Scoring System (EPSS) provides this value. The EPSS uses threat intelligence data to calculate this probability.
• Fixing cost: This attribute shows the time that your team will use to remediate the vulnerability. This value is an estimate from Fluid Attacks.
• VLAI Severity: This attribute shows the severity level that the VLAI model estimates for the vulnerability. The model uses the vulnerability description to classify it as Low, Medium, High, or Critical. Critical is the most urgent classification. This attribute applies to all vulnerability types.
• Reachability: This attribute shows if your code calls the vulnerable function in a third-party dependency. The possible values are Reachable, Potentially Reachable, and Latent. This attribute applies only to SCA vulnerabilities.

Click and drag the attributes to put them in the order that you want.

After you arrange the attributes, click Save changes or Cancel. Cancel restores the last arrangement that you saved.

After you save the arrangement, you can restore the default arrangement with the Reset to default button. Then, click Save changes to keep the default arrangement.