cvelistV5
cvelistV5 copied to clipboard
[FEATURE] Is it possible to add the impact score to the cve jsons?
Is it possible to add the impact score to the cve jsons? We only have the vector string and the base_score, but we do not have the impact score of the cves, this metric is interesting to measure the health of the environment.
If you feel strongly about this issue then I recommend checking out the cve-schema and cve-services repos which may be better suited for this question. This repo is only a downstream user of the CVE Project.
+1 to @M-nj's advice. Impact (CIA) is typically provded as part of CVSS base, are you asking about [Modified Base Metrics](Modified Base Metrics)? I believe those are supposed to be set by the consumer of CVSS, not the provider.