CVSSV4UserInteraction describes the requirement for human participation for exploitation in CVSS v4.0. NOT_DEFINED is valid only for modified (environmental) metric fields.
Values
| Enum Value | Description |
|---|---|
|
|
No user interaction is required for exploitation. |
|
|
Successful exploitation requires a user to perform actions that are not considered security-relevant (e.g., opening a document). |
|
|
Successful exploitation requires a user to take deliberate action, typically interacting with a malicious UI element. |
|
|
Assigning this value indicates insufficient information or the metric does not apply. Valid only for Modified User Interaction in environmental scoring. |
Used by
CVSSMetricV40type: Type CVSSMetricV40 contains detailed CVSS version 4.0 scoring attributes
Example
Example
"NONE"