proof
", "protocol": "TCP", "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16015", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16015", "solution_type": "workaround", "status": "VULNERABLE_POTENTIAL", "vulnerability_id": "acrobat-cve-2018-16015" } ], "severe_vulnerabilities": 0, "tags": [ { "name": "lab", "type": "SITE" } ], "total_vulnerabilities": 2, "new": [ { "check_id": "check_id", "first_found": "2024-01-25T10:46:15Z", "key": "key-123", "last_found": null, "nic": null, "port": null, "proof": "Proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16030", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16030", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16030" } ], "remediated": [ { "check_id": "check_id", "first_found": "2024-01-25T10:46:15Z", "key": "key-456", "last_found": null, "nic": null, "port": null, "proof": "Proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16031", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16031", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16031", "remediation_date": "2024-12-25T00:00:00Z" } ], "unique_identifiers": [ { "id": "10.0.0.1", "source": "Endpoint Agent" } ] }, { "assessed_for_policies": false, "assessed_for_vulnerabilities": true, "critical_vulnerabilities": 1, "exploits": 9, "host_name": "host.domain.com", "id": "452534235-25a7-40a3-9321-28ce0b5cc90e-default-asset-198", "ip": "10.4.24.164", "last_scan_end": "2020-03-20T19:12:39.766Z", "last_scan_start": "2020-03-20T19:05:06.766Z", "malware_kits": 0, "moderate_vulnerabilities": 11, "os_architecture": "", "os_description": "Ubuntu Linux 12.04", "os_family": "Linux", "os_name": "Linux", "os_system_name": "Ubuntu Linux", "os_type": "", "os_vendor": "Ubuntu", "os_version": "12.04", "risk_score": 12251.76171875, "severe_vulnerabilities": 16, "tags": [ { "name": "all_assets2", "type": "CUSTOM" }, { "name": "all_assets", "type": "CUSTOM" }, { "name": "Linux", "type": "CUSTOM" }, { "name": "docker hosts", "type": "SITE" }, { "name": "lab", "type": "SITE" } ], "total_vulnerabilities": 28, "new": [ { "check_id": "check_id", "first_found": "2024-01-25T10:46:15Z", "key": "key-123", "last_found": null, "nic": null, "port": null, "proof": "Proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16030", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16030", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16030" } ], "remediated": [ { "check_id": "check_id", "first_found": "2024-01-25T10:46:15Z", "key": "key-456", "last_found": null, "nic": null, "port": null, "proof": "Proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16031", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16031", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16031", "remediation_date": "2024-12-25T00:00:00Z" } ], "unique_identifiers": { "id": "4421d73dfe04f594df731e6bcd8156a", "source": "R7 Agent" } } ], "metadata": { "number": 0, "size": 2, "totalResources": 2195, "totalPages": 1098, "cursor": "proof
", "protocol": "TCP", "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16015", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16015", "solution_type": "workaround", "status": "VULNERABLE_POTENTIAL", "vulnerability_id": "acrobat-cve-2018-16015" } ], "severe_vulnerabilities": 229, "tags": [ { "name": "Windows", "type": "CUSTOM" }, { "name": "lab", "type": "SITE" }, { "name": "windows targets", "type": "SITE" } ], "total_vulnerabilities": 276, "type": "guest", "new": [ { "check_id": "abc", "first_found": "2024-01-25T10:46:15Z", "key": "key-123", "last_found": null, "nic": null, "port": null, "proof": "Generated dummy proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16030", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16030", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16030" } ], "remediated": [ { "check_id": "check_id", "first_found": "2024-01-25T10:46:15Z", "key": "key-456", "last_found": null, "nic": null, "port": null, "proof": "Proof
", "protocol": null, "reintroduced": null, "solution_fix": "Take a look at all possible solutions for vulnerability", "solution_id": "unknown-acrobat-cve-2018-16031", "solution_summary": "The solution is unknown for vuln acrobat-cve-2018-16031", "solution_type": "workaround", "status": "VULNERABLE_EXPL", "vulnerability_id": "acrobat-cve-2018-16031", "remediation_date": "2024-12-25T00:00:00Z" } ], "unique_identifiers": [ { "id": "10.0.0.1", "source": "Endpoint Agent" } ] } } }, "encoding": {} }, "application/xml": { "schema": { "$ref": "#/components/schemas/AssetSummary" }, "examples": { "application-xml": { "summary": "Example", "description": "The details of an asset.", "value": "{\"asset\": \"last_scan_end >= '2025-09-13T00:02:01Z' && cvss_score >= 9\"} Filter for assets that have vulnerabilities matching the asset criteria."
},
"vulnerability": {
"description": "Example {\"asset\": \"last_assessed_for_vulnerabilities >= '2025-09-13T00:02:01Z'\", \"vulnerability\": \"cvss_score >= 9\"} Filter the results to include assets which have vulnerabilities matching the asset criteria and subsequently filter for individual vulnerabilities that meet the vulnerability criteria."
}
},
"description": "${assetvulnerabilityqueryresource.description}, ${asset.vulnerability.query.resource.description}"
},
"AssetKey": {
"title": "${assetkey.title}, ${asset.key.title}",
"properties": {
"id": {
"description": "${assetkey.id.description}, ${asset.key.id.description}"
}
},
"description": "${asset.key.description}, ${assetkey.description}"
},
"AssetSummary": {
"title": "${assetsummary.title}, ${asset.summary.title}",
"properties": {
"assessed_for_policies": {
"description": "Whether an asset was assessed for policies."
},
"assessed_for_vulnerabilities": {
"description": "Whether an asset was assessed for vulnerabilities."
},
"credential_assessments": {
"description": "The credential assessments for the asset.",
"items": {
"$ref": "#/components/schemas/CredentialAssessmentSummary"
}
},
"critical_vulnerabilities": {
"description": "The count of critical vulnerability findings.",
"format": "int32"
},
"exploits": {
"description": "The count of known unique exploits that can be used to exploit vulnerabilities on the asset.",
"format": "int32"
},
"host_name": {
"description": "The host name (local or FQDN)."
},
"id": {
"$ref": "#/components/schemas/AssetKey"
},
"ip": {
"description": "The IPv4 or IPv6 address."
},
"last_assessed_for_vulnerabilities": {
"description": "The time at which an asset was assessed for vulnerabilities.",
"format": "date-time"
},
"last_scan_end": {
"description": "The time at which the last scan of the asset ended.",
"format": "date-time"
},
"last_scan_start": {
"description": "The time at which the last scan of the asset started.",
"format": "date-time"
},
"mac": {
"description": "The Media Access Control (MAC) address. The format is six groups of two hexadecimal digits separated by colons."
},
"malware_kits": {
"description": "The count of known unique malware kits that can be used to attack vulnerabilities on the asset.",
"format": "int32"
},
"moderate_vulnerabilities": {
"description": "The count of moderate vulnerability findings.",
"format": "int32"
},
"new": {
"description": "If a comparison time is supplied, the vulnerabilities that are the new in the latest version at current time.",
"items": {
"$ref": "#/components/schemas/AssetVulnerabilityResultSummary"
}
},
"os_architecture": {
"description": "The architecture of the operating system."
},
"os_description": {
"description": "The description of the operating system (containing vendor, family, product, version and architecture in a single string)."
},
"os_family": {
"description": "The family of the operating system."
},
"os_name": {
"description": "The name of the operating system."
},
"os_system_name": {
"description": "A combination of vendor and family (with redundancies removed), suitable for grouping."
},
"os_type": {
"description": "The type of operating system."
},
"os_vendor": {
"description": "The vendor of the operating system."
},
"os_version": {
"description": "The version of the operating system."
},
"remediated": {
"description": "If a comparison time is supplied, the vulnerabilities that were remediated in the latest version at current time.",
"items": {
"$ref": "#/components/schemas/AssetVulnerabilityResultSummary"
}
},
"risk_score": {
"description": "The risk score (with criticality adjustments) of the asset.",
"format": "double"
},
"same": {
"description": "If a comparison time is supplied and includeSame is `true`, the vulnerabilities that are the same between current and comparison time.",
"items": {
"$ref": "#/components/schemas/AssetVulnerabilityResultSummary"
}
},
"severe_vulnerabilities": {
"description": "The count of severe vulnerability findings.",
"format": "int32"
},
"tags": {
"description": "The tags applied to the asset.",
"items": {
"$ref": "#/components/schemas/AssetTagSummary"
}
},
"total_vulnerabilities": {
"description": "The total count of vulnerability findings.",
"format": "int32"
},
"type": {
"description": "The type of asset.",
"enum": [
"unknown",
"guest",
"hypervisor",
"physical",
"mobile"
]
},
"unique_identifiers": {
"description": "Unique identifiers found on the asset, such as hardware or operating system identifiers.",
"items": {
"$ref": "#/components/schemas/UniqueIdSummary"
}
}
},
"description": "${assetsummary.description}, ${asset.summary.description}"
},
"DispatchedScansResource": {
"title": "${dispatchedscansresource.title}, ${dispatched.scans.resource.title}",
"properties": {
"scans": {
"description": "${dispatched.scans.resource.scans.description}, ${dispatchedscansresource.scans.description}",
"items": {
"$ref": "#/components/schemas/ScanResource"
}
},
"unscanned_assets": {
"description": "${dispatchedscansresource.unscanned.assets.description}, ${dispatched.scans.resource.unscanned_assets.description}, ${dispatchedscansresource.unscanned_assets.description}, ${dispatched.scans.resource.unscanned.assets.description}",
"items": {
"$ref": "#/components/schemas/UnscannedAssetResource"
}
}
},
"description": "${dispatchedscansresource.description}, ${dispatched.scans.resource.description}"
},
"Endpoint": {
"title": "${endpoint.title}",
"properties": {
"port": {
"description": "${endpoint.port.description}",
"format": "int64"
},
"protocol": {
"description": "${endpoint.protocol.description}",
"enum": [
"IP",
"ICMP",
"IGMP",
"GGP",
"TCP",
"PUP",
"UDP",
"IDP",
"ESP",
"ND",
"RAW"
]
}
},
"description": "${endpoint.description}"
},
"EntityType": {
"title": "${entitytype.title}, ${entity.type.title}",
"properties": {
"entity": {
"description": "${entity.type.entity.description}, ${entitytype.entity.description}"
}
},
"description": "${entitytype.description}, ${entity.type.description}"
},
"MalwareKitId": {
"title": "${malwarekitid.title}, ${malware.kit.id.title}",
"properties": {
"entityType": {
"$ref": "#/components/schemas/EntityType"
},
"id": {
"description": "${malware.kit.id.id.description}, ${malwarekitid.id.description}"
}
},
"description": "The identifier of the malware kit."
},
"PagedResourcesAssetSummary": {
"title": "${paged.resources.asset.summary.title}, ${pagedresourcesassetsummary.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/AssetSummary"
}
},
"effectiveTime": {
"description": "${pagedresourcesassetsummary.effectivetime.description}, ${paged.resources.asset.summary.effective.time.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${paged.resources.asset.summary.description}, ${pagedresourcesassetsummary.description}"
},
"PagedResourcesAssetTagSummary": {
"title": "${pagedresourcesassettagsummary.title}, ${paged.resources.asset.tag.summary.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/AssetTagSummary"
}
},
"effectiveTime": {
"description": "${paged.resources.asset.tag.summary.effective.time.description}, ${pagedresourcesassettagsummary.effectivetime.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${pagedresourcesassettagsummary.description}, ${paged.resources.asset.tag.summary.description}"
},
"PagedResourcesScanEngineResource": {
"title": "${pagedresourcesscanengineresource.title}, ${paged.resources.scan.engine.resource.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/ScanEngineResource"
}
},
"effectiveTime": {
"description": "${pagedresourcesscanengineresource.effectivetime.description}, ${paged.resources.scan.engine.resource.effective.time.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${pagedresourcesscanengineresource.description}, ${paged.resources.scan.engine.resource.description}"
},
"PagedResourcesScanResource": {
"title": "${pagedresourcesscanresource.title}, ${paged.resources.scan.resource.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/ScanResource"
}
},
"effectiveTime": {
"description": "${pagedresourcesscanresource.effectivetime.description}, ${paged.resources.scan.resource.effective.time.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${paged.resources.scan.resource.description}, ${pagedresourcesscanresource.description}"
},
"PagedResourcesScanResourceWithoutAssetIds": {
"title": "${pagedresourcesscanresource.title}, ${paged.resources.scan.resource.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/ScanResource"
}
},
"effectiveTime": {
"description": "${pagedresourcesscanresource.effectivetime.description}, ${paged.resources.scan.resource.effective.time.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${paged.resources.scan.resource.description}, ${pagedresourcesscanresource.description}"
},
"PagedResourcesVulnerabilitySummary": {
"title": "${pagedresourcesvulnerabilitysummary.title}, ${paged.resources.vulnerability.summary.title}",
"properties": {
"data": {
"title": "Page Data",
"description": "The page of resources returned.",
"items": {
"$ref": "#/components/schemas/VulnerabilitySummary"
}
},
"effectiveTime": {
"description": "${paged.resources.vulnerability.summary.effective.time.description}, ${pagedresourcesvulnerabilitysummary.effectivetime.description}",
"format": "date-time",
"writeOnly": true
},
"links": {
"title": "Page Links",
"description": "Hypermedia links that allow navigation to the previous, next, first and last pages.",
"items": {
"$ref": "#/components/schemas/Link"
}
},
"metadata": {
"$ref": "#/components/schemas/CursorPageMetadata"
}
},
"description": "${paged.resources.vulnerability.summary.description}, ${pagedresourcesvulnerabilitysummary.description}"
},
"RemoveScanEngineConfigurationProperty": {
"title": "${remove.scan.engine.configuration.property.title}, ${removescanengineconfigurationproperty.title}",
"properties": {
"properties": {
"description": "List of property names to remove from a scan engine.",
"items": {}
}
},
"description": "${removescanengineconfigurationproperty.description}, ${remove.scan.engine.configuration.property.description}"
},
"ScanEngineId": {
"title": "${scan.engine.id.title}, ${scanengineid.title}",
"properties": {
"id": {
"description": "${scan.engine.id.id.description}, ${scanengineid.id.description}"
}
},
"description": "The identifier of the engine for the scan."
},
"ScanEngineResource": {
"title": "${scanengineresource.title}, ${scan.engine.resource.title}",
"properties": {
"host_name": {
"description": "${scan.engine.resource.host_name.description}, ${scan.engine.resource.host.name.description}, ${scanengineresource.host_name.description}, ${scanengineresource.host.name.description}"
},
"id": {
"$ref": "#/components/schemas/ScanEngineId"
},
"last_seen": {
"description": "${scanengineresource.last.seen.description}, ${scanengineresource.last_seen.description}, ${scan.engine.resource.last_seen.description}, ${scan.engine.resource.last.seen.description}",
"format": "date-time"
},
"name": {
"description": "${scanengineresource.name.description}, ${scan.engine.resource.name.description}"
},
"profile": {
"$ref": "#/components/schemas/ScanEngineProfile"
},
"registered": {
"description": "${scan.engine.resource.registered.description}, ${scanengineresource.registered.description}",
"format": "date-time"
},
"status": {
"description": "${scan.engine.resource.status.description}, ${scanengineresource.status.description}"
}
},
"description": "${scan.engine.resource.description}, ${scanengineresource.description}"
},
"ScanId": {
"title": "${scanid.title}, ${scan.id.title}",
"properties": {
"id": {
"description": "${scanid.id.description}, ${scan.id.id.description}"
}
},
"description": "The identifier of the scan."
},
"ScanResource": {
"title": "${scanresource.title}, ${scan.resource.title}",
"properties": {
"asset_ids": {
"description": "${scanresource.asset.ids.description}, ${scanresource.asset_ids.description}, ${scan.resource.asset_ids.description}, ${scan.resource.asset.ids.description}",
"items": {}
},
"details": {
"description": "${scanresource.details.description}, ${scan.resource.details.description}"
},
"engine_id": {
"$ref": "#/components/schemas/ScanEngineId"
},
"finished": {
"description": "${scanresource.finished.description}, ${scan.resource.finished.description}",
"format": "date-time"
},
"id": {
"$ref": "#/components/schemas/ScanId"
},
"name": {
"description": "${scanresource.name.description}, ${scan.resource.name.description}"
},
"started": {
"description": "${scanresource.started.description}, ${scan.resource.started.description}",
"format": "date-time"
},
"status": {
"description": "${scan.resource.status.description}, ${scanresource.status.description}"
}
},
"description": "${scanresource.description}, ${scan.resource.description}"
},
"ScanResourceWithoutAssetIds": {
"title": "${scanresource.title}, ${scan.resource.title}",
"properties": {
"details": {
"description": "${scanresource.details.description}, ${scan.resource.details.description}"
},
"engine_id": {
"$ref": "#/components/schemas/ScanEngineId"
},
"finished": {
"description": "${scanresource.finished.description}, ${scan.resource.finished.description}",
"format": "date-time"
},
"id": {
"$ref": "#/components/schemas/ScanId"
},
"name": {
"description": "${scanresource.name.description}, ${scan.resource.name.description}"
},
"started": {
"description": "${scanresource.started.description}, ${scan.resource.started.description}",
"format": "date-time"
},
"status": {
"description": "${scan.resource.status.description}, ${scanresource.status.description}"
}
},
"description": "${scanresource.description}, ${scan.resource.description}"
},
"SolutionId": {
"title": "${solution.id.title}, ${solutionid.title}",
"properties": {
"entityType": {
"$ref": "#/components/schemas/EntityType"
},
"id": {
"description": "${solutionid.id.description}, ${solution.id.id.description}"
}
},
"description": "${solutionid.description}, ${solution.id.description}"
},
"UnscannedAssetResource": {
"title": "${unscanned.asset.resource.title}, ${unscannedassetresource.title}",
"properties": {
"id": {
"description": "${unscannedassetresource.id.description}, ${unscanned.asset.resource.id.description}"
},
"reason": {
"description": "${unscanned.asset.resource.reason.description}, ${unscannedassetresource.reason.description}"
}
},
"description": "${unscannedassetresource.description}, ${unscanned.asset.resource.description}"
},
"UpdateEnginePropertiesForm": {
"title": "${updateenginepropertiesform.title}, ${update.engine.properties.form.title}",
"properties": {
"properties": {
"description": "The properties to apply to the engine payload.",
"items": {
"$ref": "#/components/schemas/ScanEngineConfigurationPropertyInput"
}
}
},
"description": "${updateenginepropertiesform.description}, ${update.engine.properties.form.description}"
},
"VulnerabilityCheckId": {
"title": "${vulnerabilitycheckid.title}, ${vulnerability.check.id.title}",
"properties": {
"id": {
"description": "${vulnerability.check.id.id.description}, ${vulnerabilitycheckid.id.description}"
}
},
"description": "${vulnerabilitycheckid.description}, ${vulnerability.check.id.description}"
},
"VulnerabilityId": {
"title": "${vulnerabilityid.title}, ${vulnerability.id.title}",
"properties": {
"entityType": {
"$ref": "#/components/schemas/EntityType"
},
"id": {
"description": "${vulnerabilityid.id.description}, ${vulnerability.id.id.description}"
}
},
"description": "The identifier of the vulnerability."
},
"VulnerabilitySummary": {
"title": "${vulnerabilitysummary.title}, ${vulnerability.summary.title}",
"properties": {
"added": {
"description": "The date the vulnerability coverage was added. The format is an ISO 8601 date, `YYYY-MM-DD`.",
"format": "date-time"
},
"categories": {
"description": "Comma-separated list of categories the vulnerability is classified under."
},
"cves": {
"description": "All CVEs assigned to this vulnerability."
},
"cvss_v2_access_complexity": {
"description": "Access Complexity (AC) component which measures the complexity of the attack required to exploit the vulnerability once an attacker has gained access to the target system. | Access Complexity | Description |
|---|---|
| High (\"high\") | Specialized access conditions exist. |
| Medium (\"medium\") | The access conditions are somewhat specialized. |
| Low (\"low\") | Specialized access conditions or extenuating circumstances do not exist. |
| Access Vector | Description |
|---|---|
| Local (\"local\") | A vulnerability exploitable with only local access requires the attacker to have either physical access to the vulnerable system or a local (shell) account. |
| Adjacent Network (\"adjacent\") | A vulnerability exploitable with adjacent network access requires the attacker to have access to either the broadcast or collision domain of the vulnerable software. |
| Network (\"network\") | A vulnerability exploitable with network access means the vulnerable software is bound to the network stack and the attacker does not require local network access or local access. Such a vulnerability is often termed \"remotely exploitable\". |
| Authentication | Description |
|---|---|
| Multiple (\"multiple\") | Exploiting the vulnerability requires that the attacker authenticate two or more times, even if the same credentials are used each time. |
| Single (\"single\") | The vulnerability requires an attacker to be logged into the system. |
| None (\"none\") | Authentication is not required to exploit the vulnerability. |
| Availability Impact | Description |
|---|---|
| None (\"none) | There is no impact to the availability of the system. |
| Partial (\"partial\") | There is reduced performance or interruptions in resource availability. |
| Complete (\"complete\") | There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable. |
| Confidentiality Impact | Description |
|---|---|
| None (\"none\") | There is no impact to the confidentiality of the system. |
| Partial (\"partial\") | There is considerable informational disclosure. Access to some system files is possible, but the attacker does not have control over what is obtained, or the scope of the loss is constrained. |
| Complete (\"complete\") | There is total information disclosure, resulting in all system files being revealed. The attacker is able to read all of the system's data (memory, files, etc.) |
| Integrity Impact | Description |
|---|---|
| None (\"none\") | There is no impact to the integrity of the system. |
| Partial (\"partial\") | Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited. |
| Complete (\"complete\") | There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised. The attacker is able to modify any files on the target system. |
| Access Complexity | Description |
|---|---|
| Low (\"low\") | Specialized access conditions or extenuating circumstances do not exist. |
| High (\"high\") | A successful attack depends on conditions beyond the attacker's control. |
| Access Vector | Description |
|---|---|
| Local (\"local\") | A vulnerability exploitable with only local access requires the attacker to have either physical access to the vulnerable system or a local (shell) account. |
| Adjacent (\"adjacent\") | A vulnerability exploitable with adjacent network access requires the attacker to have access to either the broadcast or collision domain of the vulnerable software. |
| Network (\"network\") | A vulnerability exploitable with network access means the vulnerable software is bound to the network stack and the attacker does not require local network access or local access. Such a vulnerability is often termed \"remotely exploitable\". |
| Physical (\"physical\") | A vulnerability exploitable with Physical access requires the attacker to physically touch or manipulate the vulnerable component. |
| Availability Impact | Description |
|---|---|
| High (\"high\") | There is total loss of availability, resulting in the attacker being able to fully deny access to resources in the impacted component; this loss is either sustained (while the attacker continues to deliver the attack) or persistent (the condition persists even after the attack has completed). |
| Low (\"low\") | There is reduced performance or interruptions in resource availability. Even if repeated exploitation of the vulnerability is possible, the attacker does not have the ability to completely deny service to legitimate users. |
| None (\"none\") | There is no impact to availability within the impacted component. |
| Confidentiality Impact | Description |
|---|---|
| High (\"high\") | There is total loss of confidentiality, resulting in all resources within the impacted component being divulged to the attacker. |
| Low (\"low\") | There is some loss of confidentiality. Access to some restricted information is obtained, but the attacker does not have control over what information is obtained, or the amount or kind of loss is constrained. |
| None (\"none\") | There is no loss of confidentiality within the impacted component. |
| Integrity Impact | Description |
|---|---|
| High (\"high\") | There is a total loss of integrity, or a complete loss of protection. |
| Low (\"low\") | Modification of data is possible, but the attacker does not have control over the consequence of a modification, or the amount of modification is constrained. |
| None (\"none\") | There is no loss of integrity within the impacted component. |
| Privileges Required | Description |
|---|---|
| High (\"high\") | The attacker is authorized with (i.e. requires) privileges that provide significant (e.g. administrative) control over the vulnerable component that could affect component-wide settings and files. |
| Low (\"low\") | The attacker is authorized with (i.e. requires) privileges that provide basic user capabilities that could normally affect only settings and files owned by a user. |
| None (\"none\") | The attacker is unauthorized prior to attack, and therefore does not require any access to settings or files to carry out an attack. |
| Scope | Description |
|---|---|
| Unchanged (\"unchanged\") | An exploited vulnerability can only affect resources managed by the same authority. In this case the vulnerable component and the impacted component are the same. |
| Changed (\"changed\") | An exploited vulnerability can affect resources beyond the authorization privileges intended by the vulnerable component. In this case the vulnerable component and the impacted component are different. |
| User Interaction | Description |
|---|---|
| None (\"none\") | The vulnerable system can be exploited without interaction from any user. |
| Required (\"required\") | Successful exploitation of this vulnerability requires a user to take some action before the vulnerability can be exploited. |