CVSS

Common Vulnerability Scoring System. For details, see https://www.first.org/cvss/specification-document This is a message we will try to use for storing various versions of CVSS rather than making a separate proto for storing a specific version.

JSON representation
 { 
 "baseScore" 
 : 
 number 
 , 
 "exploitabilityScore" 
 : 
 number 
 , 
 "impactScore" 
 : 
 number 
 , 
 "attackVector" 
 : 
 enum (  AttackVector 
 
) 
 , 
 "attackComplexity" 
 : 
 enum (  AttackComplexity 
 
) 
 , 
 "authentication" 
 : 
 enum (  Authentication 
 
) 
 , 
 "privilegesRequired" 
 : 
 enum (  PrivilegesRequired 
 
) 
 , 
 "userInteraction" 
 : 
 enum (  UserInteraction 
 
) 
 , 
 "scope" 
 : 
 enum (  Scope 
 
) 
 , 
 "confidentialityImpact" 
 : 
 enum (  Impact 
 
) 
 , 
 "integrityImpact" 
 : 
 enum (  Impact 
 
) 
 , 
 "availabilityImpact" 
 : 
 enum (  Impact 
 
) 
 } 
Fields
baseScore

number

The base score is a function of the base metric scores.

exploitabilityScore

number

impactScore

number

attackVector

enum ( AttackVector )

Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments.

attackComplexity

enum ( AttackComplexity )

authentication

enum ( Authentication )

privilegesRequired

enum ( PrivilegesRequired )

userInteraction

enum ( UserInteraction )

scope

enum ( Scope )

confidentialityImpact

enum ( Impact )

integrityImpact

enum ( Impact )

availabilityImpact

enum ( Impact )

AttackVector

Enums
ATTACK_VECTOR_UNSPECIFIED
ATTACK_VECTOR_NETWORK
ATTACK_VECTOR_ADJACENT
ATTACK_VECTOR_LOCAL
ATTACK_VECTOR_PHYSICAL

AttackComplexity

Enums
ATTACK_COMPLEXITY_UNSPECIFIED
ATTACK_COMPLEXITY_LOW
ATTACK_COMPLEXITY_HIGH
ATTACK_COMPLEXITY_MEDIUM

Authentication

Enums
AUTHENTICATION_UNSPECIFIED
AUTHENTICATION_MULTIPLE
AUTHENTICATION_SINGLE
AUTHENTICATION_NONE

PrivilegesRequired

Enums
PRIVILEGES_REQUIRED_UNSPECIFIED
PRIVILEGES_REQUIRED_NONE
PRIVILEGES_REQUIRED_LOW
PRIVILEGES_REQUIRED_HIGH

UserInteraction

Enums
USER_INTERACTION_UNSPECIFIED
USER_INTERACTION_NONE
USER_INTERACTION_REQUIRED

Scope

Enums
SCOPE_UNSPECIFIED
SCOPE_UNCHANGED
SCOPE_CHANGED

Impact

Enums
IMPACT_UNSPECIFIED
IMPACT_HIGH
IMPACT_LOW
IMPACT_NONE
IMPACT_PARTIAL
IMPACT_COMPLETE
Design a Mobile Site
View Site in Mobile | Classic
Share by: