Vulnerability Severity: Bitsight Severity & CVSS – Bitsight Knowledge Base

⇤ Vulnerability

Some vulnerabilities are more critical than others. They carry a greater weight than less critical vulnerabilities that are observed over the same time period.

Criticality is summarized by Bitsight severity. Bitsight severity is based on the Common Vulnerability Scoring System (CVSS), a scoring system that uses various properties of the vulnerability for determining its level of severity.

Bitsight Severity	CVSS
Minor Slug name: `minor`	0.0 - 3.9
Moderate Slug name: `moderate`	4.0 - 6.9
Material Slug name: `material`	7.0 - 8.9
Severe Slug name: `severe`	9.0 - 10.0

October 18, 2024: Updated title to cover both Bitsight severity and CVSS scales.
August 20, 2024: Embedded associated icons.
January 13, 2021: Published.

Related articles