#[non_exhaustive]pub struct Cvss {
pub base_score: Option<f64>,
pub depth: Option<String>,
pub metrics: Option<Vec<Metric>>,
pub overall_score: Option<f64>,
pub severity: Option<String>,
pub src_url: Option<String>,
pub vector_string: Option<String>,
pub vendor_name: Option<String>,
pub version: Option<String>,
}Expand description
CVSS Score
The Common Vulnerability Scoring System (CVSS) object provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity.
[] Category: | Name: cvss
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.base_score: Option<f64>Base Score
The CVSS base score. For example: 9.1.
required
depth: Option<String>CVSS Depth
The CVSS depth represents a depth of the equation used to calculate CVSS score.
recommended
metrics: Option<Vec<Metric>>Metrics
The Common Vulnerability Scoring System metrics. This attribute contains information on the CVE’s impact. If the CVE has been analyzed, this attribute will contain any CVSSv2 or CVSSv3 information associated with the vulnerability. For example: { {“Access Vector”, “Network”}, {“Access Complexity”, “Low”}, …}.
optional
overall_score: Option<f64>Overall Score
The CVSS overall score, impacted by base, temporal, and environmental metrics. For example: 9.1.
recommended
severity: Option<String>Severity
The Common Vulnerability Scoring System (CVSS) Qualitative Severity Rating. A textual representation of the numeric score.
CVSS v2.0- Low (0.0 – 3.9)
- Medium (4.0 – 6.9)
- High (7.0 – 10.0)
- None (0.0)
- Low (0.1 - 3.9)
- Medium (4.0 - 6.9)
- High (7.0 - 8.9)
- Critical (9.0 - 10.0)
optional
src_url: Option<String>Source URL
The source URL for the CVSS score. For example: https://nvd.nist.gov/vuln/detail/CVE-2021-44228
optional
vector_string: Option<String>Vector String
The CVSS vector string is a text representation of a set of CVSS metrics. It is commonly used to record or transfer CVSS metric information in a concise form. For example: 3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
optional
vendor_name: Option<String>Vendor Name
The vendor that provided the CVSS score. For example: NVD, REDHAT etc.
recommended
version: Option<String>Version
The CVSS version. For example: 3.1.
required