
Product Announcements — pmonaghan (Veracode, Inc.) asked a question.
On May 22nd, Veracode will be activating the NVD Severities feature for customers who are already using CVSS v3. This change will only impact Upload SCA results, not Agent, and ultimately, the impact will be minimal. CVEs with a v3 score in the 8.1-8.9 range will go from Very High severity to High severity, and CVEs with a v3 score in the 6.1-6.9 range will go from High severity to Medium severity. In other words, some severities will go down, none will go up, and all will finally match what you see in the NVD and in Veracode's vulnerability database. If you would like to activate this feature now, contact Veracode’s Technical Support team, and ask them to activate the NVD Severities feature for your account. For more details, please see the attached FAQs. Thank you.
.png)
thank you for sharing @pmonaghan (Veracode, Inc.)