---
title: CVSSMetricV40 type | Wartiva GraphQL API
description: Type CVSSMetricV40 contains detailed CVSS version 4.0 scoring attributes. Wartiva GraphQL API reference with arguments, fields, and examples.
url: https://wartiva.com/api-docs/types/cvss-metric-v40.html
updated: 2026-10-07
---

Vulnerabilities · GraphQL type

# `CVSSMetricV40` type

Type `CVSSMetricV40` contains detailed CVSS version 4.0 scoring attributes

## Fields

| Field Name | Description |
|---|---|
| `version` - [`String`](https://wartiva.com/api-docs/types/string.html) | CVSS version number (4.0) |
| `vectorString` - [`String`](https://wartiva.com/api-docs/types/string.html) | Compressed textual representation of all metric values |
| `attackVector` - [`CVSSV4AttackVector`](https://wartiva.com/api-docs/types/cvssv4-attack-vector.html) | Context from which the vulnerability can be exploited |
| `attackComplexity` - [`CVSSV4AttackComplexity`](https://wartiva.com/api-docs/types/cvssv4-attack-complexity.html) | Conditions beyond the attacker's control required for exploitation |
| `attackRequirements` - [`CVSSV4AttackRequirements`](https://wartiva.com/api-docs/types/cvssv4-attack-requirements.html) | Deployment and execution conditions that enable the attack |
| `privilegesRequired` - [`CVSSV4PrivilegesRequired`](https://wartiva.com/api-docs/types/cvssv4-privileges-required.html) | Level of privileges the attacker must possess before exploiting |
| `userInteraction` - [`CVSSV4UserInteraction`](https://wartiva.com/api-docs/types/cvssv4-user-interaction.html) | Whether exploitation requires user participation (NONE, PASSIVE, ACTIVE) |
| `vulnConfidentialityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on vulnerable system confidentiality (NONE, LOW, HIGH) |
| `vulnIntegrityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on vulnerable system integrity (NONE, LOW, HIGH) |
| `vulnAvailabilityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on vulnerable system availability (NONE, LOW, HIGH) |
| `subConfidentialityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on subsequent systems' confidentiality (NONE, LOW, HIGH) |
| `subIntegrityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on subsequent systems' integrity (NONE, LOW, HIGH) |
| `subAvailabilityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Impact on subsequent systems' availability (NONE, LOW, HIGH) |
| `exploitCodeMaturity` - [`CVSSV4ExploitMaturity`](https://wartiva.com/api-docs/types/cvssv4-exploit-maturity.html) | Current maturity state of exploit code or techniques |
| `confidentialityRequirement` - [`CVSSCIARequirement`](https://wartiva.com/api-docs/types/cvsscia-requirement.html) | Importance of confidentiality to the organization |
| `integrityRequirement` - [`CVSSCIARequirement`](https://wartiva.com/api-docs/types/cvsscia-requirement.html) | Importance of data integrity to the organization |
| `availabilityRequirement` - [`CVSSCIARequirement`](https://wartiva.com/api-docs/types/cvsscia-requirement.html) | Importance of system availability to the organization |
| `modifiedAttackVector` - [`CVSSV4AttackVector`](https://wartiva.com/api-docs/types/cvssv4-attack-vector.html) | Attack vector adjusted for specific environment |
| `modifiedAttackComplexity` - [`CVSSV4AttackComplexity`](https://wartiva.com/api-docs/types/cvssv4-attack-complexity.html) | Attack complexity adjusted for specific environment |
| `modifiedPrivilegesRequired` - [`CVSSV4PrivilegesRequired`](https://wartiva.com/api-docs/types/cvssv4-privileges-required.html) | Privileges required adjusted for specific environment |
| `modifiedUserInteraction` - [`CVSSV4UserInteraction`](https://wartiva.com/api-docs/types/cvssv4-user-interaction.html) | User interaction requirement adjusted for specific environment |
| `modifiedVulnConfidentialityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Vulnerable system confidentiality impact adjusted for specific environment |
| `modifiedVulnIntegrityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Vulnerable system integrity impact adjusted for specific environment |
| `modifiedVulnAvailabilityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Vulnerable system availability impact adjusted for specific environment |
| `modifiedSubConfidentialityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Subsequent systems confidentiality impact adjusted for specific environment |
| `modifiedSubIntegrityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Subsequent systems integrity impact adjusted for specific environment |
| `modifiedSubAvailabilityImpact` - [`CVSSV4CIAImpact`](https://wartiva.com/api-docs/types/cvssv4-cia-impact.html) | Subsequent systems availability impact adjusted for specific environment |
| `safety` - [`CVSSV4Safety`](https://wartiva.com/api-docs/types/cvssv4-safety.html) | Whether exploitation poses safety impact to human life or health |
| `automatable` - [`CVSSV4Automatable`](https://wartiva.com/api-docs/types/cvssv4-automatable.html) | Whether the vulnerability can be exploited without human involvement |
| `recovery` - [`CVSSV4Recovery`](https://wartiva.com/api-docs/types/cvssv4-recovery.html) | Level of effort required to recover from successful exploitation |
| `valueDensity` - [`CVSSV4ValueDensity`](https://wartiva.com/api-docs/types/cvssv4-value-density.html) | Concentration of resources accessible through exploitation |
| `vulnerabilityResponseEffort` - [`CVSSV4VulnerabilityResponseEffort`](https://wartiva.com/api-docs/types/cvssv4-vulnerability-response-effort.html) | Level of effort required to respond to the vulnerability |
| `providerUrgency` - [`CVSSV4ProviderUrgency`](https://wartiva.com/api-docs/types/cvssv4-provider-urgency.html) | Provider's assessment of remediation urgency |

## Used by

- [`CVSSMetricV40Base`](https://wartiva.com/api-docs/types/cvss-metric-v40-base.html) type: Type CVSSMetricV40Base represents CVSS version 4.0 base scoring metrics

## Example

### Example

```json
{
  "version": "abc123",
  "vectorString": "xyz789",
  "attackVector": "NETWORK",
  "attackComplexity": "LOW",
  "attackRequirements": "NONE",
  "privilegesRequired": "NONE",
  "userInteraction": "NONE",
  "vulnConfidentialityImpact": "HIGH",
  "vulnIntegrityImpact": "HIGH",
  "vulnAvailabilityImpact": "HIGH",
  "subConfidentialityImpact": "HIGH",
  "subIntegrityImpact": "HIGH",
  "subAvailabilityImpact": "HIGH",
  "exploitCodeMaturity": "UNREPORTED",
  "confidentialityRequirement": "NOT_DEFINED",
  "integrityRequirement": "NOT_DEFINED",
  "availabilityRequirement": "NOT_DEFINED",
  "modifiedAttackVector": "NETWORK",
  "modifiedAttackComplexity": "LOW",
  "modifiedPrivilegesRequired": "NONE",
  "modifiedUserInteraction": "NONE",
  "modifiedVulnConfidentialityImpact": "HIGH",
  "modifiedVulnIntegrityImpact": "HIGH",
  "modifiedVulnAvailabilityImpact": "HIGH",
  "modifiedSubConfidentialityImpact": "HIGH",
  "modifiedSubIntegrityImpact": "HIGH",
  "modifiedSubAvailabilityImpact": "HIGH",
  "safety": "PRESENT",
  "automatable": "NO",
  "recovery": "AUTOMATIC",
  "valueDensity": "DIFFUSE",
  "vulnerabilityResponseEffort": "LOW",
  "providerUrgency": "CLEAR"
}

```

---

Wartiva is in early access. Request access: https://wartiva.com/early-access.html  
All pages: https://wartiva.com/llms.txt