SQL Export for CVSSv2 score

InsightVM
,
1

Greetings,

Is there any way to input the CVSSv2 score into an SQL report? I am attempting to use the dv.cvss_score to pull this, but it seems to be pulling CVSSv3 most of the time. Since the Critical severity level goes by CVSSv2 > 7.5 only, this is not showing us an accurate representation of the score we are looking at. When looking at the data warehouse schema, the only 2 tables that seem show the score are cvss_score and cvss_v3_score under dim_vulnerability. The plain cvss_score one only seems to show the v2 score when the v3 score is not available. Is there any way to pull this data? I will include one of the queries I am working with to help visualize what I am doing.

SELECT DISTINCT
da.ip_address AS “IP”,
da.host_name AS “Hostname”,
dv.title AS “Title”,
CASE
WHEN dv.cvss_score BETWEEN 7.5
AND 10 THEN
‘Critical’
WHEN dv.cvss_score BETWEEN 3.5
AND 7.4 THEN
‘Severe’
WHEN dv.cvss_score BETWEEN 0
AND 3.4 THEN
‘Moderate’
END AS “Severity”,
ROUND(dv.cvss_score::numeric, 1) AS cvss_score
FROM
fact_asset_vulnerability_instance AS fasvi
JOIN fact_asset_vulnerability_age AS fava ON fasvi.vulnerability_id = fava.vulnerability_id
JOIN dim_vulnerability AS dv ON fasvi.vulnerability_id = dv.vulnerability_id
JOIN dim_asset AS da ON fasvi.asset_id = da.asset_id
JOIN dim_vulnerability_reference AS dvr ON dv.vulnerability_id = dvr.vulnerability_id
JOIN dim_operating_system AS dos ON da.operating_system_id = dos.operating_system_id
JOIN fact_vulnerability fv on fv.vulnerability_id = dv.vulnerability_id
WHERE fava.age_in_days > 30

2

@daniel_cruzan this adds the v2 and the v3 score to the results

SELECT DISTINCT
da.ip_address AS "IP",
da.host_name AS "Hostname",
dv.title AS "Title", cvss_v2_score, cvss_v3_score,
CASE
WHEN dv.cvss_score BETWEEN 7.5
AND 10 THEN
'Critical'
WHEN dv.cvss_score BETWEEN 3.5
AND 7.4 THEN
'Severe'
WHEN dv.cvss_score BETWEEN 0
AND 3.4 THEN
'Moderate'
END AS "Severity",
ROUND(dv.cvss_score::numeric, 1) AS cvss_score
FROM
fact_asset_vulnerability_instance AS fasvi
JOIN fact_asset_vulnerability_age AS fava ON fasvi.vulnerability_id = fava.vulnerability_id
JOIN dim_vulnerability AS dv ON fasvi.vulnerability_id = dv.vulnerability_id
JOIN dim_asset AS da ON fasvi.asset_id = da.asset_id
JOIN dim_vulnerability_reference AS dvr ON dv.vulnerability_id = dvr.vulnerability_id
JOIN dim_operating_system AS dos ON da.operating_system_id = dos.operating_system_id
JOIN fact_vulnerability fv on fv.vulnerability_id = dv.vulnerability_id
WHERE fava.age_in_days > 30```