Severity tiers
- Informational: 0
- Low: 0.1 to 3.9
- Medium: 4.0 to 6.9
- High: 7.0 to 8.9
- Critical: 9.0 to 10.0
Findings
Severity and CVSS
Every finding gets a CVSS score. CVSS (Common Vulnerability Scoring System) is the industry-standard way of expressing how severe a vulnerability is, rated f…
Every finding gets a CVSS score. CVSS (Common Vulnerability Scoring System) is the industry-standard way of expressing how severe a vulnerability is, rated from 0 to 10. The higher the number, the more serious the issue.
The agent computes the CVSS score for each finding using what it learned during the scan: how the vulnerability is exploited, what access it gives an attacker, whether authentication is required, and how much damage it can do. It follows the same CVSS v3 methodology the wider security industry uses, so a score from us means the same thing as a score from anywhere else.