Category prioritizing vulnerability remediation steps