Vulnerability risk severity assessment
The severity of a bug/vulnerability is assessed based on its potential economical impact and likelihood of incident.
| Risk severity matrix | Impact | |||
|---|---|---|---|---|
| High | Medium | Low | ||
| Likelihood | High | Critical | High | Medium |
| Medium | High | Medium | Low | |
| Low | Medium | Low | Non-Critical | |