Viewing CVSS impact metrics
The exported XCCDF result file displays a rule's CVSS impact-metric element, if applicable.
To indicate the relative severity of non-compliance, the exported results file shows a value in either the CVSS score or the Weight field. In either case, the displayed value originates in the source benchmark content.
- CVSS score — If the source benchmark content includes an <impact-metric> element for a rule, the exported SCAP results file shows the impact-metric value in the CVSS score field for that rule. An example impact-metric value is: AV:L\AC:H<1. For information, see the CVSS specification.
- Weight — If the source benchmark content does not include an <impact-metric> element for a rule, then the results file shows the value from the <weight> element in the Weight field for that rule.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*