Product Announcementspmonaghan (Veracode, Inc.) asked a question.

🌟 SCA update: Activating NVD severities for customers using CVSS v3 on May 22

On May 22nd, Veracode will be activating the NVD Severities feature for customers who are already using CVSS v3. This change will only impact Upload SCA results, not Agent, and ultimately, the impact will be minimal. CVEs with a v3 score in the 8.1-8.9 range will go from Very High severity to High severity, and CVEs with a v3 score in the 6.1-6.9 range will go from High severity to Medium severity. In other words, some severities will go down, none will go up, and all will finally match what you see in the NVD and in Veracode's vulnerability database. If you would like to activate this feature now, contact Veracode’s Technical Support team, and ask them to activate the NVD Severities feature for your account. For more details, please see the attached FAQs. Thank you. 


dlawson and lucas.ferreira like this.

Topics (9)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.