Question: Assume that two vulnerabilities, x and Y , for example, are scored equally on the Attack Vector ( AV ) ,

Assume that two vulnerabilities, "x" and "Y", for example, are scored equally on the Attack Vector (AV), Attack Complexity (AC), and Privileges Required (PR) metrics in the Base Metric group.
In terms of User Interaction (UI) however:
Assume that, vulnerability "x" requires some sort of user action before the vulnerability can be exploited and vulnerability "Y" can be exploited without any user interaction. That is, an attacker can exploit vulnerability "Y" at will and does not need the user to participate to make the attack successful.
Given the above assumptions, which vulnerability will receive a greater CVSS v.3.1 Base Score (i.e. which one is worse?)
 Assume that two vulnerabilities, "x" and "Y", for example, are scored

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!