Skip to content

Consider a "CVSS Category" decision point #711

@ahouseholder

Description

@ahouseholder

Is your feature request related to a problem? Please describe.

Many vulnerability response processes use CVSS score as part of their decision model. We've already laid the groundwork for future SSVC models to include CVSS vector elements in #691. However, that did not include a decision point to cover CVSS score categories (Low/Med/High/Critical). This omission makes it a little harder to just plug a CVSS-based information feed into an SSVC decision model.

Describe the solution you'd like

Add a decision point to reflect the CVSS Qualitative Severity Rating Scale

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions