Configure Security Risk Ranking
Black Duck: Configure Security Risk Ranking
Learn about Security Risk Ranking in Black Duck and how to configure it for your organization
Black Duck allows you to adjust the risk ranking for security vulnerabilities. Multiple vulnerability scores for a given vulnerability are displayed in the interface. If your company has a corporate policy that aligns with a security risk framework that differs from the default, you can now set the risk scoring in Black Duck to match the risk profile used by your company.
Environment: Black Duck v2019.8 or newer
Users: System Administrator, Super User, Policy Manager, Global Code Scanner, Project Code Scanner
Deployment: Hosted or On-premise
Keywords: Black Duck Security Advisories, BDSA, security risk, CVE, CWE score