Issue severity levels

This table displays the issue severity levels that appear in the Compliance reports.

Icon Severity Level Description Score Example
red icon Critical High severity issues that are easier to exploit. 9.0 - 10.0 Exploitation of the vulnerability likely results in root-level compromise of servers or infrastructure devices. Exploitation is usually straightforward.
pink icon High Direct danger to your application, web server, or information. 7.0 - 8.9 Executing commands on server, stealing customer information, denial of service.
orange icon Medium Threat through unauthorized access to private areas, though the database and operating system are not at risk. 4.0 - 6.9 Script source disclosure, predictable resource location.
yellow icon Low Allow for unauthorized reconnaissance. 0.1 - 3.9 Server path disclosure, internal IP address disclosure.
gray icon Informational Issues you should know about, not necessarily security issues. 0 Insecure methods enabled.