Exploit likelihood and CVSS scoring added to Issues and Occurrences

Issues and occurrences endpoint

Added exploit likelihood and CVSS scoring to issues and issue occurrences. These new fields help provide a more detailed risk assessment for each security issue:

exploit_likelihood - Indicates the probability of an exploit being used against this vulnerability:

• rare - Very low probability of exploitation in the wild
• unlikely - Low probability of exploitation in the wild
• likely - Moderate probability of exploitation in the wild
• very_likely - High probability of exploitation in the wild
• known - Confirmed exploit exists in the wild
• unknown - Not enough data to determine likelihood
• null - No EPSS data available

cvss_score - The highest CVSS score associated with the issue or occurrence, providing a standardized severity rating from 0.0 to 10.0. A null value may be returned if there is not CVSS data available.

For more information see issues and occurrences.