Information
Unsupported content This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Viewing CVSS impact metrics


The exported XCCDF result file displays a rule's CVSS impact-metric element, if applicable.

To indicate the relative severity of non-compliance, the exported results file shows a value in either the CVSS score or the Weight field. In either case, the displayed value originates in the source benchmark content.

  • CVSS score — If the source benchmark content includes an <impact-metric> element for a rule, the exported SCAP results file shows the impact-metric value in the CVSS score field for that rule. An example impact-metric value is: AV:L\AC:H<1. For information, see the CVSS specification.
  • Weight — If the source benchmark content does not include an <impact-metric> element for a rule, then the results file shows the value from the <weight> element in the Weight field for that rule.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Server Automation 8.3