This is done.. Below is the complete query that works as intended.
SecurityNestedRecommendation
| where RecommendationSeverity == 'High' or RecommendationSeverity == 'Medium'
| extend CVE = todynamic(AdditionalData.Cve)
| mv-expand CVE
| extend Patchable_ = tostring(AdditionalData.Patchable)
| extend Type_ = tostring(AdditionalData.Type)
| extend MonthName = case( datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 1, "Jan "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 2, "Feb "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 3, "Mar "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 4, "Apr "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 5, "May "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 6, "Jun "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 7, "Jul "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 8, "Aug "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 9, "Sep "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 10, "Oct "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 11, "Nov "
, datetime_part("month", todatetime(AdditionalData.PublishedTime)) == 12, "Dec "
, "Unknown Month"
)
| extend PublishedTime = strcat(datetime_part("day", todatetime(AdditionalData.PublishedTime)),"-", MonthName,"-",datetime_part("year", todatetime(AdditionalData.PublishedTime)))
| extend VMName = extract(@"(.+)/(.+)", 2, AssessedResourceId)
| extend Base_ = tostring(parse_json(tostring(parse_json(tostring(AdditionalData.Cvss)).["3.0"])).Base)
| extend Base_ = tostring(parse_json(tostring(parse_json(tostring(AdditionalData.Cvss)).["2.0"])).Base)
| project VMName, CVE.Title , Severity = RecommendationSeverity, Description, PublishedTime, Patchable = Patchable_, Score = Base_, Type=AdditionalData.Category, Category,RemediationDescription
| sort by VMName,Severity,Patchable