Vulnerabilities · GraphQL enum

CVSSV3CIAImpact enum

CVSSV3CIAImpact describes the impact on confidentiality, integrity, or availability of a successfully exploited vulnerability in CVSS v3.x. NOT_DEFINED is valid only for modified (environmental) metric fields.

Values

Enum Value Description

NONE

There is no impact to this property.

LOW

There is some loss of this property; the attacker does not have full control.

HIGH

There is total loss of this property; the attacker gains complete control or causes complete service unavailability.

NOT_DEFINED

Assigning this value indicates insufficient information or the metric does not apply. Valid only for Modified CIA Impact fields in environmental scoring.

Used by

  • CVSSMetricV30 type: Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributes
  • CVSSMetricV31 type: Type CVSSMetricV31 contains detailed CVSS version 3.1 scoring attributes

Example

Example

"NONE"