Good morning. I’ve been trying to understand the mapping of severity ratings from 9.0 - 10.0. When we look at a side by side comparison, the former ‘Major’ can now be mapped to either ‘Medium’ or ‘Low’ (and the same goes for former ‘Minor’ findings). I’ve been going through the 10.0 release notes to try and understand what the approach was in mapping that transition with no luck. Is there a single document or reference that shows how the line is drawn from the former severity ratings to the new ones (particularly in the case of Majors becoming Lows and Minors becoming Medium)? Thanks in advance.
Hi,
Welcome to the community!
I guess you’re talking about the 10-series, right? And not literally 10.0? Because that’s already well past EOL.
In the 10-series, we introduced what’s now called MQR (multi-quality rule) mode, initially with a shorter list of severities. But by the 2025.1 LTA (yes there was a versioning change in there. The 10-series culminated in the 2025.1 LTA) we had re-expanded to have 5 severities. So if you adopt a current, supported (
) version, you’ll find yourself back at 5 severities, with a toggle to choose between Standard and MQR modes.
HTH,
Ann