Actions113
- Activity Actions
- Analytics Actions
- Asset Actions
- Asset Tag Actions
- Automation Actions
- Credential Actions
- Credential Inquiry Actions
- Email Actions
- HAI (AI) Actions
- Organization Actions
- Program Actions
- Add Structured Scope
- Archive Structured Scope
- Create CVE Request
- Get
- Get Balance
- Get Many
- Get Audit Log
- Get Common Responses
- Get Integrations
- Get Payment Transactions
- Get Reporters
- Get Triage Reviews
- Get Weaknesses
- Invite Hacker
- List CVE Requests
- List Hacker Invitations
- List Structured Scopes
- List Team Members
- List Awarded Swag
- List Thanks
- Mark Swag Sent
- Send Message
- Update Policy
- Update Structured Scope
- Report Actions
- Add Comment
- Add Participant
- Assign
- Award Bounty
- Award Swag
- Change State
- Close Comments
- Create
- Delete Attachment
- Export PDF
- Get
- Get Many
- Mark Ineligible
- Manage Disclosure
- Manage Retest
- Set Custom Fields
- Update Bounty Suggestion
- Update CVEs
- Update Inboxes
- Update Reference
- Update Scope
- Update Severity
- Update Tags
- Update Title
- Update Weakness
- Upload Attachment
- Write Summary
- User Actions
Report → Update Severity
AI-generatedSummary
Update the severity rating of a specific HackerOne report by its numeric ID, optionally including a CVSS vector string to provide more detailed vulnerability scoring information.
Inputs
- Report ID (required) — The numeric ID of the report to update.
- Rating (required) — The new severity rating to apply to the report. Options are None, Low, Medium, High, or Critical.
- CVSS Vector — Optional CVSS vector string to specify the detailed scoring of the vulnerability (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Output shape
a single record representing the updated report resource or details of the severity update result
The response includes the updated severity information of the report. No pagination applies. If the update fails, an error will be returned.
Examples
Example 1: Update the severity of report 12345 to Critical with a CVSS vector.
Set Report ID to '12345', Rating to 'Critical', and provide a CVSS Vector string to precisely define the vulnerability.