Vulnerabilities · GraphQL enum

CVSSSeverity enum

CVSSSeverity represents the qualitative severity rating associated with a CVSS score. Ratings are derived from the numeric base score and provide an accessible risk summary. CVSS v2.0 uses only LOW, MEDIUM, and HIGH. CVSS v3.x and v4.0 also use NONE and CRITICAL.

Values

Enum Value Description

NONE

 No impact. Base score is 0.0.

LOW

 Low severity. CVSS v3.x range: 0.1–3.9. CVSS v2.0 range: 0.0–3.9.

MEDIUM

 Medium severity. CVSS v3.x range: 4.0–6.9. CVSS v2.0 range: 4.0–6.9.

HIGH

 High severity. CVSS v3.x range: 7.0–8.9. CVSS v2.0 range: 7.0–10.0.

CRITICAL

 Critical severity. CVSS v3.x and v4.0 range: 9.0–10.0. Not used in CVSS v2.0.

Used by

  • CVE type: Type CVE represents a Common Vulnerabilities and Exposures entry with comprehensive security information
  • CVSSMetricV20Base type: Type CVSSMetricV20Base represents CVSS version 2.0 base scoring metrics
  • CVSSMetricV30 type: Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributes
  • CVSSMetricV31 type: Type CVSSMetricV31 contains detailed CVSS version 3.1 scoring attributes

Example

Example

"NONE"