Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributes
Fields
| Field Name | Description |
|---|---|
version - String
|
CVSS version number (3.0) |
vectorString - String
|
Compressed textual representation of all metric values |
attackVector - CVSSV3AttackVector
|
Context from which vulnerability can be exploited |
attackComplexity - CVSSV3AttackComplexity
|
Conditions beyond attacker control required for exploitation |
privilegesRequired - CVSSV3PrivilegesRequired
|
Level of privileges attacker must possess (NONE, LOW, HIGH) |
userInteraction - CVSSV3UserInteraction
|
Whether exploitation requires user participation |
scope - CVSSV3Scope
|
Whether exploitation affects resources beyond the vulnerable component |
confidentialityImpact - CVSSV3CIAImpact
|
Impact on data confidentiality (NONE, LOW, HIGH) |
integrityImpact - CVSSV3CIAImpact
|
Impact on data integrity (NONE, LOW, HIGH) |
availabilityImpact - CVSSV3CIAImpact
|
Impact on system availability (NONE, LOW, HIGH) |
baseScore - Float
|
Primary severity score (0.0-10.0) |
baseSeverity - CVSSSeverity
|
Qualitative severity rating (NONE, LOW, MEDIUM, HIGH, CRITICAL) |
exploitCodeMaturity - CVSSV3ExploitCodeMaturity
|
Current maturity state of exploit code or techniques |
remediationLevel - CVSSV3RemediationLevel
|
Availability level of official fixes or workarounds |
reportConfidence - CVSSV3ReportConfidence
|
Degree of confidence in vulnerability existence and details |
temporalScore - Float
|
Severity score adjusted for temporal factors (0.0-10.0) |
temporalSeverity - CVSSSeverity
|
Qualitative severity rating with temporal adjustments |
confidentialityRequirement - CVSSCIARequirement
|
Importance of confidentiality to the organization |
integrityRequirement - CVSSCIARequirement
|
Importance of data integrity to the organization |
availabilityRequirement - CVSSCIARequirement
|
Importance of system availability to the organization |
modifiedAttackVector - CVSSV3AttackVector
|
Attack vector adjusted for specific environment |
modifiedAttackComplexity - CVSSV3AttackComplexity
|
Attack complexity adjusted for specific environment |
modifiedPrivilegesRequired - CVSSV3PrivilegesRequired
|
Privileges required adjusted for specific environment |
modifiedUserInteraction - CVSSV3UserInteraction
|
User interaction requirement adjusted for specific environment |
modifiedScope - CVSSV3Scope
|
Scope adjusted for specific environment |
modifiedConfidentialityImpact - CVSSV3CIAImpact
|
Confidentiality impact adjusted for specific environment |
modifiedIntegrityImpact - CVSSV3CIAImpact
|
Integrity impact adjusted for specific environment |
modifiedAvailabilityImpact - CVSSV3CIAImpact
|
Availability impact adjusted for specific environment |
environmentalScore - Float
|
Severity score customized for specific environment (0.0-10.0) |
environmentalSeverity - CVSSSeverity
|
Qualitative severity rating customized for specific environment |
Used by
CVSSMetricV30Basetype: Type CVSSMetricV30Base represents CVSS version 3.0 base scoring metrics
Example
Example
{
"version": "abc123",
"vectorString": "xyz789",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "NONE",
"baseScore": 987.65,
"baseSeverity": "NONE",
"exploitCodeMaturity": "UNPROVEN",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "UNKNOWN",
"temporalScore": 123.45,
"temporalSeverity": "NONE",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NETWORK",
"modifiedAttackComplexity": "LOW",
"modifiedPrivilegesRequired": "NONE",
"modifiedUserInteraction": "NONE",
"modifiedScope": "UNCHANGED",
"modifiedConfidentialityImpact": "NONE",
"modifiedIntegrityImpact": "NONE",
"modifiedAvailabilityImpact": "NONE",
"environmentalScore": 987.65,
"environmentalSeverity": "NONE"
}