CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
↓
| Severity | high |
| CWE Name | Inclusion of Web Functionality from an Untrusted Source |
| CWE ID | CWE-830 |
| CVSS Score | 7.1 |
| Compliance | OWASP TOP10 -> A8 PCI-DSS v4.0.1 -> 6.2.4 HIPAA -> 164.306(a), 164.312(c)(1) |
| CVSS | 3.1 |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | Required |
| Scope | Changed |
| Confidentiality Impact | Low |
| Integrity Impact | Low |
| Availability Impact | Low |