Availability Impact to the Subsequent System

Availability Impact to the Subsequent System v1.0.0

This metric measures the impact on availability a successful exploit of the vulnerability will have on the Subsequent System.

Value	Definition
None	There is no impact to availability within the Subsequent System or all availability impact is constrained to the Vulnerable System.
Low	Performance is reduced or there are interruptions in resource availability. Even if repeated exploitation of the vulnerability is possible, the attacker does not have the ability to completely deny service to legitimate users.
High	There is a total loss of availability, resulting in the attacker being able to fully deny access to resources in the Subsequent System; this loss is either sustained (while the attacker continues to deliver the attack) or persistent (the condition persists even after the attack has completed).

Availability Impact to the Subsequent System v1.0.0 JSON Example

{
  "namespace": "cvss",
  "version": "1.0.0",
  "schemaVersion": "1-0-1",
  "key": "SA",
  "name": "Availability Impact to the Subsequent System",
  "description": "This metric measures the impact on availability a successful exploit of the vulnerability will have on the Subsequent System.",
  "values": [
    {
      "key": "N",
      "name": "None",
      "description": "There is no impact to availability within the Subsequent System or all availability impact is constrained to the Vulnerable System."
    },
    {
      "key": "L",
      "name": "Low",
      "description": "Performance is reduced or there are interruptions in resource availability. Even if repeated exploitation of the vulnerability is possible, the attacker does not have the ability to completely deny service to legitimate users."
    },
    {
      "key": "H",
      "name": "High",
      "description": "There is a total loss of availability, resulting in the attacker being able to fully deny access to resources in the Subsequent System; this loss is either sustained (while the attacker continues to deliver the attack) or persistent (the condition persists even after the attack has completed)."
    }
  ]
}