When vulnerabilities are returned back into the Uleska platform, they often have ASVS or CVSS categories already applied.

• To view and modify this, click Edit

• Then click Change

ASVS

You will see a list of different categories, and can search for your desired category.

CVSS

Allows you to set

• Attack Vector
  
  
• Attack Complexity
  
  
• Privileges Required
  
  
• User Interaction
  
  
• Scope
  
  
• Confidentiality
  
  
• Integrity
  
  
• Availability

For more information on CVSS and prioritising technicality of security bugs, go to https://www.first.org/.

Uleska will learn your categorisations for both ASVS and CVSS, so that anytime a similar vulnerability is returned into the Uleska platform, it will automatically be marked as the same category.