Black Duck SCA: Configure Security Risk Ranking

Black Duck SCA allows you to adjust the risk ranking for security vulnerabilities. Multiple vulnerability scores for a given vulnerability are displayed in the interface. If your company has a corporate policy that aligns with a security risk framework that differs from the default, you can now set the risk scoring in Black Duck SCA to match the risk profile used by your company. 

Environment: Black Duck SCA v2025.1 or newer

Users: System Administrator

Deployment: Hosted or On-premise

Keywords: Black Duck Security Advisories, BDSA, security risk, CVE, CWE score