A standardized method for vulnerability measurement and severity scoring.

Notes: Three scoring specifications have been created, one for each of the categories of system vulnerabilities defined by NIST SCAP. They include the Common Vulnerability Scoring System (CVSS) which address software flaw vulnerabilies (introduced in 2004/v2 in 2007), the Common Misuse Scoring System (CMSS) which was designed for measuring and scoring misuse vulnerabilities. And the Common Configuration Scoring System (CCSS) which addresses software security configuration issue vulnerabilities.

Attributes
String	description	A narrative that defines the focus of each of the SecVulnerabilityScoringSystem.
String	ID	A unique identifier for the SecVulnerabilityScoringSystem. Notes: The three scoring systems are identified as CCSS (Common Configuration Scoring System), CMSS (Common Misuse Scoring System), and CVSS (Common Vulnerability Scoring System).
String	name	A word, term, or phrase by which the SecVulnerabilityScoringSystem is known and distinguished from other SecVulnerabilityScoringSystems. Notes: There are three scoring systems named as Common Configuration Scoring System, Common Misuse Scoring System, and Common Vulnerability Scoring System.
SecurityVulnerabilityCategoryAssignment	securityVulnerabilityCategory
SecurityVulnerabilityCategoryType	securityVulnerabilityCategoryType
SecVulnerabilityScoringMetricDefnAssignment	secVulnerabilityScoringDefnMetric
String	version	A number or text used to specify that a SecVulnerabilityScoringSystem differs in certain respects from an earlier SecVulnerabilityScoringSystem.

 description

Public String description

A narrative that defines the focus of each of the SecVulnerabilityScoringSystem.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	description
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::description
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public

 ID

Public String ID

A unique identifier for the SecVulnerabilityScoringSystem.

Notes: The three scoring systems are identified as CCSS (Common Configuration Scoring System), CMSS (Common Misuse Scoring System), and CVSS (Common Vulnerability Scoring System).

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	ID
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::ID
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public

 name

Public String name

A word, term, or phrase by which the SecVulnerabilityScoringSystem is known and distinguished from other SecVulnerabilityScoringSystems.

Notes: There are three scoring systems named as Common Configuration Scoring System, Common Misuse Scoring System, and Common Vulnerability Scoring System.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	name
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::name
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public

 securityVulnerabilityCategory

Public SecurityVulnerabilityCategoryAssignment securityVulnerabilityCategory

Constraints:

Properties:

Aggregation	None
Alias
Association	SecurityVulnerabilityCategoryScoredUsing
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	securityVulnerabilityCategory
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite	secVulnerabilityScoringDefn
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::securityVulnerabilityCategory
Stereotype
Template Parameter
Type	SecurityVulnerabilityCategoryAssignment
Upper	*
Upper Value	(*)
Visibility	Public

 securityVulnerabilityCategoryType

Public SecurityVulnerabilityCategoryType securityVulnerabilityCategoryType

Constraints:

Properties:

Aggregation	None
Alias
Association	SecurityVulnerabilityCategoryTypeDetermines
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value	(1)
Multiplicity	1
Name	securityVulnerabilityCategoryType
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite	securityVulnerabilityScoringSpec
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::securityVulnerabilityCategoryType
Stereotype
Template Parameter
Type	SecurityVulnerabilityCategoryType
Upper	1
Upper Value	(1)
Visibility	Public

 secVulnerabilityScoringDefnMetric

Public SecVulnerabilityScoringMetricDefnAssignment secVulnerabilityScoringDefnMetric

Constraints:

Properties:

Aggregation	None
Alias
Association	SecVulnerabilityScoringDefnComposedOf
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	secVulnerabilityScoringDefnMetric
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite	secVulnerabilityScoringDefn
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::secVulnerabilityScoringDefnMetric
Stereotype
Template Parameter
Type	SecVulnerabilityScoringMetricDefnAssignment
Upper	*
Upper Value	(*)
Visibility	Public

 version

Public String version

A number or text used to specify that a SecVulnerabilityScoringSystem differs in certain respects from an earlier SecVulnerabilityScoringSystem.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecVulnerabilityScoringSystem
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	version
Name Expression
Namespace	SecVulnerabilityScoringSystem
Opposite
Owner	SecVulnerabilityScoringSystem
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::SecVulnerabilityScoringSystem::version
Stereotype
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public