- JSON representation
- AttackVector
- AttackComplexity
- Authentication
- PrivilegesRequired
- UserInteraction
- Scope
- Impact
Common Vulnerability Scoring System. For details, see https://www.first.org/cvss/specification-document This is a message we will try to use for storing various versions of CVSS rather than making a separate proto for storing a specific version.
JSON representation |
---|
{ "baseScore" : number , "exploitabilityScore" : number , "impactScore" : number , "attackVector" : enum ( |
Fields | |
---|---|
baseScore
|
The base score is a function of the base metric scores. |
exploitabilityScore
|
|
impactScore
|
|
attackVector
|
Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. |
attackComplexity
|
|
authentication
|
|
privilegesRequired
|
|
userInteraction
|
|
scope
|
|
confidentialityImpact
|
|
integrityImpact
|
|
availabilityImpact
|
|
AttackVector
Enums | |
---|---|
ATTACK_VECTOR_UNSPECIFIED
|
|
ATTACK_VECTOR_NETWORK
|
|
ATTACK_VECTOR_ADJACENT
|
|
ATTACK_VECTOR_LOCAL
|
|
ATTACK_VECTOR_PHYSICAL
|
AttackComplexity
Enums | |
---|---|
ATTACK_COMPLEXITY_UNSPECIFIED
|
|
ATTACK_COMPLEXITY_LOW
|
|
ATTACK_COMPLEXITY_HIGH
|
|
ATTACK_COMPLEXITY_MEDIUM
|
Authentication
Enums | |
---|---|
AUTHENTICATION_UNSPECIFIED
|
|
AUTHENTICATION_MULTIPLE
|
|
AUTHENTICATION_SINGLE
|
|
AUTHENTICATION_NONE
|
PrivilegesRequired
Enums | |
---|---|
PRIVILEGES_REQUIRED_UNSPECIFIED
|
|
PRIVILEGES_REQUIRED_NONE
|
|
PRIVILEGES_REQUIRED_LOW
|
|
PRIVILEGES_REQUIRED_HIGH
|
UserInteraction
Enums | |
---|---|
USER_INTERACTION_UNSPECIFIED
|
|
USER_INTERACTION_NONE
|
|
USER_INTERACTION_REQUIRED
|
Scope
Enums | |
---|---|
SCOPE_UNSPECIFIED
|
|
SCOPE_UNCHANGED
|
|
SCOPE_CHANGED
|
Impact
Enums | |
---|---|
IMPACT_UNSPECIFIED
|
|
IMPACT_HIGH
|
|
IMPACT_LOW
|
|
IMPACT_NONE
|
|
IMPACT_PARTIAL
|
|
IMPACT_COMPLETE
|