CVSSV3CIAImpact describes the impact on confidentiality, integrity, or availability of a successfully exploited vulnerability in CVSS v3.x. NOT_DEFINED is valid only for modified (environmental) metric fields.
Values
| Enum Value | Description |
|---|---|
|
|
There is no impact to this property. |
|
|
There is some loss of this property; the attacker does not have full control. |
|
|
There is total loss of this property; the attacker gains complete control or causes complete service unavailability. |
|
|
Assigning this value indicates insufficient information or the metric does not apply. Valid only for Modified CIA Impact fields in environmental scoring. |
Used by
CVSSMetricV30type: Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributesCVSSMetricV31type: Type CVSSMetricV31 contains detailed CVSS version 3.1 scoring attributes
Example
Example
"NONE"