Anything under an 8The national vulnerability database is buckling under defunding and volume, which changes what a severity score is actually worth.
