CVSS Score

The CVSS base score. For example: 9.1.

The CVSS depth represents a depth of the equation used to calculate CVSS score.

• Base: Base (BASE)
• Environmental: Environmental (ENVIRONMENTAL)
• Temporal: Temporal (TEMPORAL)

The Common Vulnerability Scoring System metrics. This attribute contains information on the CVE's impact. If the CVE has been analyzed, this attribute will contain any CVSSv2 or CVSSv3 information associated with the vulnerability. For example: { {"Access Vector", "Network"}, {"Access Complexity", "Low"}, ...}.

The CVSS overall score, impacted by base, temporal, and environmental metrics. For example: 9.1.

Group:context
The event data as received from the event source.

Group:primary
Unique identifier for the object

The Common Vulnerability Scoring System (CVSS) Qualitative Severity Rating. A textual representation of the numeric score.

• Low (0.0 – 3.9)
• Medium (4.0 – 6.9)
• High (7.0 – 10.0)

• None (0.0)
• Low (0.1 - 3.9)
• Medium (4.0 - 6.9)
• High (7.0 - 8.9)
• Critical (9.0 - 10.0)

Entity:URL_STRING
The source URL for the CVSS score. For example: https://nvd.nist.gov/vuln/detail/CVE-2021-44228

Data from the source that was not mapped into the schema.

The CVSS vector string is a text representation of a set of CVSS metrics. It is commonly used to record or transfer CVSS metric information in a concise form. For example: 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

The vendor that provided the CVSS score. For example: NVD, REDHAT etc.

The CVSS version. For example: 3.1.