Safety

Safety v1.0.0

The Safety decision point is a measure of the potential for harm to humans or the environment.

Value	Definition
Not Defined	This metric value is not defined. See CVSS documentation for details.
Present	Consequences of the vulnerability meet definition of IEC 61508 consequence categories of "marginal," "critical," or "catastrophic."
Negligible	Consequences of the vulnerability meet definition of IEC 61508 consequence category "negligible."

Safety v1.0.0 JSON Example

{
  "namespace": "cvss",
  "version": "1.0.0",
  "schemaVersion": "1-0-1",
  "key": "S",
  "name": "Safety",
  "description": "The Safety decision point is a measure of the potential for harm to humans or the environment.",
  "values": [
    {
      "key": "X",
      "name": "Not Defined",
      "description": "This metric value is not defined. See CVSS documentation for details."
    },
    {
      "key": "P",
      "name": "Present",
      "description": "Consequences of the vulnerability meet definition of IEC 61508 consequence categories of \"marginal,\" \"critical,\" or \"catastrophic.\""
    },
    {
      "key": "N",
      "name": "Negligible",
      "description": "Consequences of the vulnerability meet definition of IEC 61508 consequence category \"negligible.\""
    }
  ]
}

CVSS:Safety vs SSVC:Public Safety Impact vs SSVC:Safety Impact

The CVSS Safety vector element is semantically interchangeable with the SSVC Public Safety Impact decision point. The main difference is that the CVSS Safety vector element accomodates an explicit Not Defined value, whereas the SSVC Public Safety Impact does not.

The SSVC Safety Impact decision point provides a higher-resolution view of the safety impact. The SSVC Public Safety Impact and CVSS Safety decision points are lower-resolution views of the safety impact.

Previous Versions

Following are the previous versions of the decision point: