cvelistV5 icon indicating copy to clipboard operation
cvelistV5 copied to clipboard

[FEATURE] Is it possible to add the impact score to the cve jsons?

Open jr-costa opened this issue 9 months ago • 2 comments

Is it possible to add the impact score to the cve jsons? We only have the vector string and the base_score, but we do not have the impact score of the cves, this metric is interesting to measure the health of the environment.

jr-costa avatar Feb 18 '25 17:02 jr-costa

If you feel strongly about this issue then I recommend checking out the cve-schema and cve-services repos which may be better suited for this question. This repo is only a downstream user of the CVE Project.

M-nj avatar Feb 18 '25 20:02 M-nj

+1 to @M-nj's advice. Impact (CIA) is typically provded as part of CVSS base, are you asking about [Modified Base Metrics](Modified Base Metrics)? I believe those are supposed to be set by the consumer of CVSS, not the provider.

zmanion avatar Apr 04 '25 22:04 zmanion