Prioritization attributes

Last updated: Oct 14, 2026

---

The Priority section within Policies lets you configure the order of priority attributes for vulnerability remediation. Fluid Attacks uses this order to calculate the priority rank of each vulnerability.

The number 1 is the most important attribute and 7 is the least important.

The available attributes are the following:

• Transitivity: This attribute identifies whether the vulnerability is in a transitive dependency. A transitive dependency is a component that one of your direct dependencies uses. You do not control this component directly.
• Use: This attribute identifies whether the vulnerable component is used in development or in production. Vulnerabilities in production have a higher impact on your business and security.
• KEV: This attribute identifies whether the vulnerability is in the Known Exploited Vulnerabilities (KEV) catalog. CISA maintains this catalog. The catalog lists vulnerabilities that attackers have already exploited.
• % EPSS: This attribute shows the probability that a vulnerability will be exploited in the next 30 days. The Exploit Prediction Scoring System (EPSS) provides this value. The EPSS uses threat intelligence data to calculate this probability.
• Fixing cost: This attribute shows how long Fluid Attacks estimates it will take your team to remediate the vulnerability.
• VLAI Severity: This attribute shows the severity level that the VLAI model estimates for the vulnerability. The model uses the vulnerability description to classify it as Low, Medium, High, or Critical. Critical is the most urgent classification. This attribute applies to all vulnerability types.
• Reachability: This attribute indicates whether your code calls the vulnerable function in a third-party dependency. The possible values are Reachable, Potentially Reachable, and Latent. This attribute applies only to SCA vulnerabilities.

Click and drag the attributes to arrange them in the order you want.

After you arrange the attributes, click Save changes or Cancel. Cancel restores the last arrangement that you saved.

After you save the arrangement, you can restore the default arrangement by clicking the Reset to default button. Then click Save changes to keep the default arrangement.