Target Distribution

Target Distribution (cvss:TD:1.1.0)

This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.

Value	Key	Definition
None	N	No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk.
Low	L	Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk.
Medium	M	Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk.
High	H	Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk.
Not Defined	X	This metric value is not defined. See CVSS documentation for details.

Target Distribution (cvss:TD:1.1.0) JSON Example

{
  "namespace": "cvss",
  "key": "TD",
  "version": "1.1.0",
  "name": "Target Distribution",
  "definition": "This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.",
  "schemaVersion": "2.0.0",
  "values": [
    {
      "key": "N",
      "name": "None",
      "definition": "No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk."
    },
    {
      "key": "L",
      "name": "Low",
      "definition": "Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk."
    },
    {
      "key": "M",
      "name": "Medium",
      "definition": "Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk."
    },
    {
      "key": "H",
      "name": "High",
      "definition": "Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk."
    },
    {
      "key": "X",
      "name": "Not Defined",
      "definition": "This metric value is not defined. See CVSS documentation for details."
    }
  ]
}

Previous Versions

Following are the previous versions of the decision point:

Target Distribution (cvss:TD:1.0.0)

This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.

Value	Key	Definition
None	N	No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk.
Low	L	Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk.
Medium	M	Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk.
High	H	Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk.

Target Distribution (cvss:TD:1.0.0) JSON Example

{
  "namespace": "cvss",
  "key": "TD",
  "version": "1.0.0",
  "name": "Target Distribution",
  "definition": "This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.",
  "schemaVersion": "2.0.0",
  "values": [
    {
      "key": "N",
      "name": "None",
      "definition": "No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk."
    },
    {
      "key": "L",
      "name": "Low",
      "definition": "Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk."
    },
    {
      "key": "M",
      "name": "Medium",
      "definition": "Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk."
    },
    {
      "key": "H",
      "name": "High",
      "definition": "Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk."
    }
  ]
}

---