PSE-Prisma Cloud

CVEs that affect the current OS release but have no vendor fix are reported as affected vulnerabilities. Prisma Cloud only suppresses such findings when a vulnerability policy explicitly enables “Apply rule only when vendor fixes are available.” CI build failure and deployed-image blocking are separate policy actions that require configured failure or block thresholds; they are not automatic consequences of medium severity. Therefore, the image is deployed successfully and its vulnerabilities are reported.