Target Distribution

Target Distribution v1.1.0

This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.

Value	Definition
None	No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk.
Low	Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk.
Medium	Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk.
High	Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk.
Not Defined	This metric value is not defined. See CVSS documentation for details.

Target Distribution v1.1.0 JSON Example

{
  "namespace": "cvss",
  "version": "1.1.0",
  "schemaVersion": "1-0-1",
  "key": "TD",
  "name": "Target Distribution",
  "description": "This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.",
  "values": [
    {
      "key": "N",
      "name": "None",
      "description": "No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk."
    },
    {
      "key": "L",
      "name": "Low",
      "description": "Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk."
    },
    {
      "key": "M",
      "name": "Medium",
      "description": "Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk."
    },
    {
      "key": "H",
      "name": "High",
      "description": "Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk."
    },
    {
      "key": "X",
      "name": "Not Defined",
      "description": "This metric value is not defined. See CVSS documentation for details."
    }
  ]
}

Previous Versions

Following are the previous versions of the decision point:

Target Distribution v1.0.0

This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.

Value	Definition
None	No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk.
Low	Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk.
Medium	Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk.
High	Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk.

Target Distribution v1.0.0 JSON Example

{
  "namespace": "cvss",
  "version": "1.0.0",
  "schemaVersion": "1-0-1",
  "key": "TD",
  "name": "Target Distribution",
  "description": "This metric measures the relative size of the field of target systems susceptible to the vulnerability. It is meant as an environment-specific indicator in order to approximate the percentage of systems within the environment that could be affected by the vulnerability.",
  "values": [
    {
      "key": "N",
      "name": "None",
      "description": "No target systems exist, or targets are so highly specialized that they only exist in a laboratory setting. Effectively 0% of the environment is at risk."
    },
    {
      "key": "L",
      "name": "Low",
      "description": "Targets exist inside the environment, but on a small scale. Between 1% - 15% of the total environment is at risk."
    },
    {
      "key": "M",
      "name": "Medium",
      "description": "Targets exist inside the environment, but on a medium scale. Between 16% - 49% of the total environment is at risk."
    },
    {
      "key": "H",
      "name": "High",
      "description": "Targets exist inside the environment on a considerable scale. Between 50% - 100% of the total environment is considered at risk."
    }
  ]
}

---