Vulnerabilities · GraphQL enum

CVSSV3AttackComplexity enum

CVSSV3AttackComplexity describes conditions beyond the attacker's control that must exist in order to exploit the vulnerability in CVSS v3.x. NOT_DEFINED is valid only for modified (environmental) metric fields.

Values

Enum Value Description

LOW

 Specialized access conditions or circumstances do not exist. Exploitation is repeatable.

HIGH

 A successful attack depends on conditions outside the attacker's control, reducing exploit reliability.

NOT_DEFINED

 Assigning this value indicates insufficient information or the metric does not apply. Valid only for Modified Attack Complexity in environmental scoring.

Used by

  • CVSSMetricV30 type: Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributes
  • CVSSMetricV31 type: Type CVSSMetricV31 contains detailed CVSS version 3.1 scoring attributes

Example

Example

"LOW"