Go to the source code of this file.
Enumerations | |
| enum | AccessVector_t { AV_LOCAL, AV_ADJACENT_NETWORK, AV_NETWORK } |
| Access Vector. More... | |
| enum | AccessComplexity_t { AC_HIGH, AC_MEDIUM, AC_LOW } |
| Access Complexity. More... | |
| enum | Authentication_t { AU_NONE, AU_SINGLE_INSTANCE, AU_MULTIPLE_INSTANCE } |
| Authentication. More... | |
| enum | ConfImpact_t { CI_NONE, CI_PARTIAL, CI_COMPLETE } |
| Confidentiality Impact. More... | |
| enum | IntegImpact_t { II_NONE, II_PARTIAL, II_COMPLETE } |
| Integrity Impact. More... | |
| enum | AvailImpact_t { AI_NONE, AI_PARTIAL, AI_COMPLETE } |
| Availability Impact. More... | |
| enum | Exploitability_t { EX_UNPROVEN, EX_PROOF_OF_CONCEPT, EX_FUNCTIONAL, EX_HIGH, EX_NOT_DEFINED } |
| Exploitability. More... | |
| enum | RemediationLevel_t { RL_OFFICIAL_FIX, RL_TEMPORARY_FIX, RL_WORKAROUND, RL_UNAVAILABLE, RL_NOT_DEFINED } |
| Remediation Level. More... | |
| enum | ReportConfidence_t { RC_UNCONFIRMED, RC_UNCORROBORATED, RC_CONFIRMED, RC_NOT_DEFINED } |
| Report Confidence. More... | |
| enum | CollateralDamagePotential_t { CD_NONE, CD_LOW, CD_LOW_MEDIUM, CD_MEDIUM_HIGH, CD_HIGH, CD_NOT_DEFINED } |
| Collateral Damage Potential. More... | |
| enum | TargetDistribution_t { TD_NONE, TD_LOW, TD_MEDIUM, TD_HIGH, TD_NOT_DEFINED } |
| Target Distribution. More... | |
| enum | ConfReq_t { CR_LOW, CR_MEDIUM, CR_HIGH, CR_NOT_DEFINED } |
| Confidentiality Requirement. More... | |
| enum | IntegReq_t { IR_LOW, IR_MEDIUM, IR_HIGH, IR_NOT_DEFINED } |
| Integrity Requirement. More... | |
| enum | AvailReq_t { AR_LOW, AR_MEDIUM, AR_HIGH, AR_NOT_DEFINED } |
| Availabublity Requirement. More... | |
Functions | |
| int | baseScore (AccessVector_t ave, AccessComplexity_t ace, Authentication_t aue, ConfImpact_t cie, IntegImpact_t iie, AvailImpact_t aie, double *base_score, double *impact_score, double *exploitability_score) |
| int | tempScore (Exploitability_t exe, RemediationLevel_t rle, ReportConfidence_t rce, double base_score, double *temporal_score) |
| int | envScore (CollateralDamagePotential_t cde, TargetDistribution_t tde, ConfReq_t cre, IntegReq_t ire, AvailReq_t are, double *enviromental_score, AccessVector_t ave, AccessComplexity_t ace, Authentication_t aue, ConfImpact_t cie, IntegImpact_t iie, AvailImpact_t aie, Exploitability_t exe, RemediationLevel_t rle, ReportConfidence_t rce) |
See details at http://nvd.nist.gov/cvss.cfm
| enum AccessComplexity_t |
Access Complexity.
This metric measures the complexity of the attack required to exploit the vulnerability once an attacker has gained access to the target system.
| enum AccessVector_t |
| enum Authentication_t |
Authentication.
This metric measures the complexity of the attack required to exploit the vulnerability once an attacker has gained access to the target system.
| enum AvailImpact_t |
Availability Impact.
This metric measures the impact to availability of a successfully exploited vulnerability.
| enum AvailReq_t |
Availabublity Requirement.
This metric enable the analyst to customize the CVSS score depending on the importance of the affected IT asset to a user’s organization, measured in term of availability.
Collateral Damage Potential.
This metric measures the potential for loss of life or physical assets through damage or theft of property or equipment.
| enum ConfImpact_t |
Confidentiality Impact.
This metric measures the impact on confidentiality of a successfully exploited vulnerability.
| enum ConfReq_t |
Confidentiality Requirement.
This metric enable the analyst to customize the CVSS score depending on the importance of the affected IT asset to a user’s organization, measured in term of confidentiality.
| enum Exploitability_t |
Exploitability.
This metric measures the current state of exploit techniques or code availability.
| enum IntegImpact_t |
Integrity Impact.
This metric measures the impact to integrity of a successfully exploited vulnerability.
| enum IntegReq_t |
Integrity Requirement.
This metric enable the analyst to customize the CVSS score depending on the importance of the affected IT asset to a user’s organization, measured in term of integrity.
| enum RemediationLevel_t |
Remediation Level.
The remediation level of a vulnerability is an important factor for prioritization.
| enum ReportConfidence_t |
Report Confidence.
This metric measures the degree of confidence in the existence of the vulnerability and the credibility of the known technical details.
| enum TargetDistribution_t |
Target Distribution.
This metric measures the proportion of vulnerable systems. It is meant as an environment-specific indicator in order to approximate the percentage of systems that could be affected by the vulnerability.
1.5.6