Wrong data.vulnerability.severity value compared to cvss3 score

[Daniel D'Angeli]

Hi,

there is a huge problem with the data.vulnerability.severity value, in the following image you can see CVE that appear as Medium but have much higher score on the NVD database.

The first row should appear as High and the second one should be Critical. This means that the data.vulnerabililty.severity is not a guarantee to look at.

Regards,

Daniel D.

[Matias Pereyra]

Hello!

Thank you very much for reporting this situation.
We are aware of this issue and it was reported here CVSS score and severity mismatch on RHEL feed based agents for vulnerability detector.

We'll solve this as soon as possible, I apologize for the inconveniences. 

Regards.

[Daniel D'Angeli]

Hi,

got it thanks.

Regards,

Daniel D.