HackerOne icon

HackerOne

Manage your HackerOne bug bounty program via API

Actions113

Report → Update Severity

AI-generated

Summary

Update the severity rating of a specific HackerOne report by its numeric ID, optionally including a CVSS vector string to provide more detailed vulnerability scoring information.

Inputs

  • Report ID (required) — The numeric ID of the report to update.
  • Rating (required) — The new severity rating to apply to the report. Options are None, Low, Medium, High, or Critical.
  • CVSS Vector — Optional CVSS vector string to specify the detailed scoring of the vulnerability (e.g., CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Output shape

a single record representing the updated report resource or details of the severity update result

The response includes the updated severity information of the report. No pagination applies. If the update fails, an error will be returned.

Examples

Example 1: Update the severity of report 12345 to Critical with a CVSS vector.

Set Report ID to '12345', Rating to 'Critical', and provide a CVSS Vector string to precisely define the vulnerability.

Links

Discussion