ID Asset Threat Event Exploited Vulnerability Adverse Impact Measure Harm Threat Level Level New New Harm Risk Residual Risk Severity Thread Liklihood Liklihood Liklihood Liklihood VU 1 User interface Use fields to access database. SQL Dependency injection System Configuration is altered. 4 3 4 Escape all User supplied input. 3 2 Threat Source: Cybercriminal Access Vector: Network Confidentiality Impact: None Skill Level: Medium Motivation: Greed Acceptable Access Complexity: Medium Integrity Impact: High Unacceptable Availability Impact: None
ID Asset Threat Event Exploited Vulnerability Adverse Impact Severity Thread Liklihood Harm Liklihood Risk Level Measure New Threat Liklihood New Harm Liklihood Residual Risk Level VU 1 User interface Use fields to access database. Threat Source: Cybercriminal Skill Level: Medium Motivation: Greed SQL Dependency injection Access Vector: Network Access Complexity: Medium System Configuration is altered. Confidentiality Impact: None Integrity Impact: High Availability Impact: None 4 3 4 Unacceptable Escape all User supplied input. 3 2 Acceptable