Vulnerabilities · GraphQL enum

CVSSV3ExploitCodeMaturity enum

CVSSV3ExploitCodeMaturity describes the current state of exploit techniques or code availability in CVSS v3.x.

Values

Enum Value Description

UNPROVEN

 No exploit is available or the vulnerability is entirely theoretical.

PROOF_OF_CONCEPT

 Proof-of-concept exploit code or demonstrations are publicly available.

FUNCTIONAL

 A functional exploit is available with low or no specialization required.

HIGH

 A fully functioning exploit is available or the vulnerability is actively exploited in the wild.

NOT_DEFINED

 Assigning this value indicates insufficient information or the metric does not apply. Has no impact on the Temporal score.

Used by

  • CVSSMetricV30 type: Type CVSSMetricV30 contains detailed CVSS version 3.0 scoring attributes
  • CVSSMetricV31 type: Type CVSSMetricV31 contains detailed CVSS version 3.1 scoring attributes

Example

Example

"UNPROVEN"