Vulnerabilities · GraphQL type

CVSSMetricV20 type

Type CVSSMetricV20 contains detailed CVSS version 2.0 scoring attributes

Fields

Field Name Description
version - String CVSS version number (2.0)
vectorString - String Compressed textual representation of all metric values
accessVector - CVSSV20AccessVector How the vulnerability is accessed (LOCAL, ADJACENT_NETWORK, NETWORK)
accessComplexity - CVSSV20AccessComplexity Difficulty of exploitation (HIGH, MEDIUM, LOW)
authentication - CVSSV20Authentication Number of authentication instances required (MULTIPLE, SINGLE, NONE)
confidentialityImpact - CVSSV20CIAImpact Impact on data confidentiality (NONE, PARTIAL, COMPLETE)
integrityImpact - CVSSV20CIAImpact Impact on data integrity (NONE, PARTIAL, COMPLETE)
availabilityImpact - CVSSV20CIAImpact Impact on system availability (NONE, PARTIAL, COMPLETE)
baseScore - Float Primary severity score (0.0-10.0)
exploitability - CVSSV20Exploitability Current state of exploit techniques or code availability
remediationLevel - CVSSV20RemediationLevel Availability level of patches or workarounds
reportConfidence - CVSSV20ReportConfidence Degree of confidence in the vulnerability's existence
temporalScore - Float Severity score adjusted for temporal factors (0.0-10.0)
collateralDamagePotential - CVSSV20CollateralDamagePotential Potential for loss of life or property damage
targetDistribution - CVSSV20TargetDistribution Proportion of vulnerable systems in the environment
confidentialityRequirement - CVSSCIARequirement Importance of confidentiality to the organization
integrityRequirement - CVSSCIARequirement Importance of data integrity to the organization
availabilityRequirement - CVSSCIARequirement Importance of system availability to the organization
environmentScore - Float Severity score customized for specific environment (0.0-10.0)

Used by

  • CVSSMetricV20Base type: Type CVSSMetricV20Base represents CVSS version 2.0 base scoring metrics

Example

Example

{
  "version": "xyz789",
  "vectorString": "xyz789",
  "accessVector": "LOCAL",
  "accessComplexity": "HIGH",
  "authentication": "MULTIPLE",
  "confidentialityImpact": "NONE",
  "integrityImpact": "NONE",
  "availabilityImpact": "NONE",
  "baseScore": 123.45,
  "exploitability": "UNPROVEN",
  "remediationLevel": "OFFICIAL_FIX",
  "reportConfidence": "UNCONFIRMED",
  "temporalScore": 987.65,
  "collateralDamagePotential": "NONE",
  "targetDistribution": "NONE",
  "confidentialityRequirement": "NOT_DEFINED",
  "integrityRequirement": "NOT_DEFINED",
  "availabilityRequirement": "NOT_DEFINED",
  "environmentScore": 987.65
}