Issue severity levels
This table displays the issue severity levels that appear in the Compliance reports.
| Icon | Severity Level | Description | Score | Example |
|---|---|---|---|---|
| Critical | High severity issues that are easier to exploit. | 9.0 - 10.0 | Exploitation of the vulnerability likely results in root-level compromise of servers or infrastructure devices. Exploitation is usually straightforward. | |
| High | Direct danger to your application, web server, or information. | 7.0 - 8.9 | Executing commands on server, stealing customer information, denial of service. | |
| Medium | Threat through unauthorized access to private areas, though the database and operating system are not at risk. | 4.0 - 6.9 | Script source disclosure, predictable resource location. | |
| Low | Allow for unauthorized reconnaissance. | 0.1 - 3.9 | Server path disclosure, internal IP address disclosure. | |
| Informational | Issues you should know about, not necessarily security issues. | 0 | Insecure methods enabled. |