KEV Exposure Triage Tool.

Required input fields.

• CVE or advisory reference (required)
• Known exploitation status (required): Unknown or not checked, Known exploited catalog or confirmed exploitation, Active exploitation observed internally or by trusted source
• Asset criticality (required): Low, Material, Critical
• Internet exposure (required): Not internet-facing, Limited exposure, Internet-facing
• Patch availability (required): Patch available, Mitigation only, No patch or unknown
• Compensating controls (required): Strong and monitored, Partial, Weak or unknown
• Patchability (required): Routine window, Complex dependency, Blocked or high-risk

Data handling: this interface uses the L2ET protected same-origin instrument engine. Do not enter confidential, regulated, privileged, incident, medical or sensitive operational data.

Heatmap logic.

Scores exploitation status, exposure, criticality, patch availability, compensating controls and patchability to recommend review priority and SLA pressure.

Source families

Assumptions

• User must verify CVE and product applicability.
• No live asset discovery is performed.
• Priority is an orientation signal, not a vulnerability management system.

Known-exploited vulnerability review note.

The generated artifact includes findings, assumptions, limitations, recommended next actions and exportable structured output.

Export options

Example input and output.

Example input

Known exploited CVE on an internet-facing critical service with patch available but complex deployment.

Example output

Outputs high-priority review, short SLA recommendation, evidence required and residual-risk notes.