Black Duck: Configure Security Risk Ranking

Black Duck allows you to adjust the risk ranking for security vulnerabilities. Multiple vulnerability scores for a given vulnerability are displayed in the interface. If your company has a corporate policy that aligns with a security risk framework that differs from the default, you can now set the risk scoring in Black Duck to match the risk profile used by your company. 

Environment: Black Duck v2019.8 or newer

Users: System Administrator, Super User, Policy Manager, Global Code Scanner, Project Code Scanner

Deployment: Hosted or On-premise

Keywords: Black Duck Security Advisories, BDSA, security risk, CVE, CWE score