Vulnerabilities · GraphQL type

CVSSMetricV40 type

Type CVSSMetricV40 contains detailed CVSS version 4.0 scoring attributes

Fields

Field Name Description
version - String CVSS version number (4.0)
vectorString - String Compressed textual representation of all metric values
attackVector - CVSSV4AttackVector Context from which the vulnerability can be exploited
attackComplexity - CVSSV4AttackComplexity Conditions beyond the attacker's control required for exploitation
attackRequirements - CVSSV4AttackRequirements Deployment and execution conditions that enable the attack
privilegesRequired - CVSSV4PrivilegesRequired Level of privileges the attacker must possess before exploiting
userInteraction - CVSSV4UserInteraction Whether exploitation requires user participation (NONE, PASSIVE, ACTIVE)
vulnConfidentialityImpact - CVSSV4CIAImpact Impact on vulnerable system confidentiality (NONE, LOW, HIGH)
vulnIntegrityImpact - CVSSV4CIAImpact Impact on vulnerable system integrity (NONE, LOW, HIGH)
vulnAvailabilityImpact - CVSSV4CIAImpact Impact on vulnerable system availability (NONE, LOW, HIGH)
subConfidentialityImpact - CVSSV4CIAImpact Impact on subsequent systems' confidentiality (NONE, LOW, HIGH)
subIntegrityImpact - CVSSV4CIAImpact Impact on subsequent systems' integrity (NONE, LOW, HIGH)
subAvailabilityImpact - CVSSV4CIAImpact Impact on subsequent systems' availability (NONE, LOW, HIGH)
exploitCodeMaturity - CVSSV4ExploitMaturity Current maturity state of exploit code or techniques
confidentialityRequirement - CVSSCIARequirement Importance of confidentiality to the organization
integrityRequirement - CVSSCIARequirement Importance of data integrity to the organization
availabilityRequirement - CVSSCIARequirement Importance of system availability to the organization
modifiedAttackVector - CVSSV4AttackVector Attack vector adjusted for specific environment
modifiedAttackComplexity - CVSSV4AttackComplexity Attack complexity adjusted for specific environment
modifiedPrivilegesRequired - CVSSV4PrivilegesRequired Privileges required adjusted for specific environment
modifiedUserInteraction - CVSSV4UserInteraction User interaction requirement adjusted for specific environment
modifiedVulnConfidentialityImpact - CVSSV4CIAImpact Vulnerable system confidentiality impact adjusted for specific environment
modifiedVulnIntegrityImpact - CVSSV4CIAImpact Vulnerable system integrity impact adjusted for specific environment
modifiedVulnAvailabilityImpact - CVSSV4CIAImpact Vulnerable system availability impact adjusted for specific environment
modifiedSubConfidentialityImpact - CVSSV4CIAImpact Subsequent systems confidentiality impact adjusted for specific environment
modifiedSubIntegrityImpact - CVSSV4CIAImpact Subsequent systems integrity impact adjusted for specific environment
modifiedSubAvailabilityImpact - CVSSV4CIAImpact Subsequent systems availability impact adjusted for specific environment
safety - CVSSV4Safety Whether exploitation poses safety impact to human life or health
automatable - CVSSV4Automatable Whether the vulnerability can be exploited without human involvement
recovery - CVSSV4Recovery Level of effort required to recover from successful exploitation
valueDensity - CVSSV4ValueDensity Concentration of resources accessible through exploitation
vulnerabilityResponseEffort - CVSSV4VulnerabilityResponseEffort Level of effort required to respond to the vulnerability
providerUrgency - CVSSV4ProviderUrgency Provider's assessment of remediation urgency

Used by

  • CVSSMetricV40Base type: Type CVSSMetricV40Base represents CVSS version 4.0 base scoring metrics

Example

Example

{
  "version": "abc123",
  "vectorString": "xyz789",
  "attackVector": "NETWORK",
  "attackComplexity": "LOW",
  "attackRequirements": "NONE",
  "privilegesRequired": "NONE",
  "userInteraction": "NONE",
  "vulnConfidentialityImpact": "HIGH",
  "vulnIntegrityImpact": "HIGH",
  "vulnAvailabilityImpact": "HIGH",
  "subConfidentialityImpact": "HIGH",
  "subIntegrityImpact": "HIGH",
  "subAvailabilityImpact": "HIGH",
  "exploitCodeMaturity": "UNREPORTED",
  "confidentialityRequirement": "NOT_DEFINED",
  "integrityRequirement": "NOT_DEFINED",
  "availabilityRequirement": "NOT_DEFINED",
  "modifiedAttackVector": "NETWORK",
  "modifiedAttackComplexity": "LOW",
  "modifiedPrivilegesRequired": "NONE",
  "modifiedUserInteraction": "NONE",
  "modifiedVulnConfidentialityImpact": "HIGH",
  "modifiedVulnIntegrityImpact": "HIGH",
  "modifiedVulnAvailabilityImpact": "HIGH",
  "modifiedSubConfidentialityImpact": "HIGH",
  "modifiedSubIntegrityImpact": "HIGH",
  "modifiedSubAvailabilityImpact": "HIGH",
  "safety": "PRESENT",
  "automatable": "NO",
  "recovery": "AUTOMATIC",
  "valueDensity": "DIFFUSE",
  "vulnerabilityResponseEffort": "LOW",
  "providerUrgency": "CLEAR"
}