Options
All
  • Public
  • Public/Protected
  • All
Menu

Class Cvss3ScoringEngine

Implements a service offering CVSS v3 vulnerability scoring.

remarks

Consumers should ensure that they make sure of the validation features built in to this class in the form of the validate and isValid functions. Attempting to call computeScore on an instance with an invalid configuration will raise an exception.

Hierarchy

  • Cvss3ScoringEngine

Implements

  • CvssScoringEngine

Index

Constructors

Properties

Accessors

Methods

Constructors

constructor

Properties

Private _attackComplexity

_attackComplexity: AttackComplexity

Private _attackVector

_attackVector: AttackVector

Private _availabilityImpact

_availabilityImpact: Impact

Private _availabilityRequirement

_availabilityRequirement: SecurityRequirement

Private _confidentialityImpact

_confidentialityImpact: Impact

Private _confidentialityRequirement

_confidentialityRequirement: SecurityRequirement

Private _exploitCodeMaturity

_exploitCodeMaturity: ExploitCodeMaturity

Private _integrityImpact

_integrityImpact: Impact

Private _integrityRequirement

_integrityRequirement: SecurityRequirement

Private _modifiedAttackComplexity

_modifiedAttackComplexity: AttackComplexity

Private _modifiedAttackVector

_modifiedAttackVector: AttackVector

Private _modifiedAvailabilityImpact

_modifiedAvailabilityImpact: Impact

Private _modifiedConfidentialityImpact

_modifiedConfidentialityImpact: Impact

Private _modifiedIntegrityImpact

_modifiedIntegrityImpact: Impact

Private _modifiedPrivilegesRequired

_modifiedPrivilegesRequired: PrivilegesRequired

Private _modifiedScope

_modifiedScope: Scope

Private _modifiedUserInteraction

_modifiedUserInteraction: UserInteraction

Private _privilegesRequired

_privilegesRequired: PrivilegesRequired

Private _remediationLevel

_remediationLevel: RemediationLevel

Private _reportConfidence

_reportConfidence: ReportConfidence

Private _scope

_scope: Scope

Private _userInteraction

_userInteraction: UserInteraction

Accessors

attackComplexity

attackVector

availabilityImpact

  • get availabilityImpact(): Impact
  • set availabilityImpact(availabilityImpact: Impact): void

availabilityRequirement

confidentialityImpact

  • get confidentialityImpact(): Impact
  • set confidentialityImpact(confidentialityImpact: Impact): void

confidentialityRequirement

exploitCodeMaturity

integrityImpact

  • get integrityImpact(): Impact
  • set integrityImpact(integrityImpact: Impact): void

integrityRequirement

modifiedAttackComplexity

modifiedAttackVector

modifiedAvailabilityImpact

  • get modifiedAvailabilityImpact(): Impact
  • set modifiedAvailabilityImpact(modifiedAvailabilityImpact: Impact): void

modifiedConfidentialityImpact

  • get modifiedConfidentialityImpact(): Impact
  • set modifiedConfidentialityImpact(modifiedConfidentialityImpact: Impact): void

modifiedIntegrityImpact

  • get modifiedIntegrityImpact(): Impact
  • set modifiedIntegrityImpact(modifiedIntegrityImpact: Impact): void

modifiedPrivilegesRequired

modifiedScope

  • get modifiedScope(): Scope
  • set modifiedScope(modifiedScope: Scope): void

modifiedUserInteraction

privilegesRequired

remediationLevel

reportConfidence

scope

  • get scope(): Scope
  • set scope(scope: Scope): void

userInteraction

Methods

Private computeBaseImpactSubscore

  • computeBaseImpactSubscore(): number
  • Computes the base impact subscore (called ISC_Base) in the specification.

    Returns number

    the base impact subscore

Private computeBaseScore

  • computeBaseScore(): number

Private computeEnvironmentalScore

  • computeEnvironmentalScore(): number

Private computeExploitabilitySubscore

  • computeExploitabilitySubscore(): number

Private computeImpactSubscore

  • computeImpactSubscore(): number
  • Computes the impact subscore (called ISC in the specification).

    Returns number

    the impact subscore

Private computeIscModified

  • computeIscModified(): number
  • Computes the value defined in the specification as ISC_Modified.

    Returns number

    the value defined in the specification as ISC_Modified.

Private computeModifiedExploitabilitySubscore

  • computeModifiedExploitabilitySubscore(): number
  • Computes the modified exploitability subscore.

    Returns number

    the modified exploitability subscore

Private computeModifiedImpactSubscore

  • computeModifiedImpactSubscore(): number

Private computeOverallScore

  • computeOverallScore(): number

computeScore

  • Computes the CVSS score set under the current configuration.

    Returns CvssScore

    the computed CVSS score set

Private computeTemporalScore

  • computeTemporalScore(): number

Private getModifiedAttackComplexityValue

  • Gets the modified attack complexity if defined, otherwise returns the base attack complexity.

    Returns AttackComplexity

    the modified attack complexity if defined, otherwise the base attack complexity

Private getModifiedAttackVectorValue

  • Gets the modified attack vector if defined, otherwise returns the base attack vector.

    Returns AttackVector

    the modified attack vector if defined, otherwise the base attack vector

Private getModifiedAvailabilityImpactValue

  • getModifiedAvailabilityImpactValue(): Impact
  • Gets the modified availability impact if defined, otherwise returns the base availability impact.

    Returns Impact

    the modified availability impact if defined, otherwise the base availability impact

Private getModifiedConfidentialityImpactValue

  • getModifiedConfidentialityImpactValue(): Impact
  • Gets the modified confidentiality impact if defined, otherwise returns the base confidentiality impact.

    Returns Impact

    the modified confidentiality impact if defined, otherwise the base confidentiality impact

Private getModifiedIntegrityImpactValue

  • getModifiedIntegrityImpactValue(): Impact
  • Gets the modified integrity impact if defined, otherwise returns the base integrity impact.

    Returns Impact

    the modified integrity impact if defined, otherwise the base integrity impact

Private getModifiedPrivilegesRequiredValue

  • Gets the modified privileges required if defined, otherwise returns the base privileges required.

    Returns PrivilegesRequired

    the modified privileges required if defined, otherwise the base privileges required

Private getModifiedScopeValue

  • getModifiedScopeValue(): Scope
  • Gets the modified scope if defined, otherwise returns the base scope.

    Returns Scope

    the modified scope if defined, otherwise the base scope

Private getModifiedUserInteractionValue

  • Gets the modified user interaction if defined, otherwise returns the base user interaction.

    Returns UserInteraction

    the modified user interaction if defined, otherwise the base user interaction

isEnvironmentalScoreDefined

  • isEnvironmentalScoreDefined(): boolean
  • Gets whether or not an environmental score is defined.

    Returns boolean

    true if an environmental score is defined, otherwise false

isTemporalScoreDefined

  • isTemporalScoreDefined(): boolean
  • Gets whether or not a temporal score is defined.

    Returns boolean

    true if a temporal score is defined, otherwise false

isValid

  • isValid(): boolean
  • Validates that this instance is ready to compute a CVSS score.

    Returns boolean

    true if this instance is ready to compute a CVSS score, otherwise false

validate

  • validate(): ScoreValidationError[]
  • Audits the readiness of this instance to compute a CVSS score.

    Returns ScoreValidationError[]

    a list of validation errors discovered that must be addressed before score generation

Static Private renderAttackComplexity

Static Private renderAttackVector

Static Private renderExploitCodeMaturity

Static Private renderImpact

  • renderImpact(impact: Impact): number

Static Private renderPrivilegesRequired

Static Private renderRemediationLevel

Static Private renderReportConfidence

Static Private renderSecurityRequirement

Static Private renderUserInteraction

Generated using TypeDoc