Add security-severity metadata

2025-12-21 19:26:31 +01:00 · 2021-05-24 17:16:22 +01:00
parent e7b9603c5b
commit a594afb828
352 changed files with 364 additions and 0 deletions
--- a/java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql
+++ b/java/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql
@@ -5,6 +5,7 @@
 * @kind path-problem
 * @precision low
 * @problem.severity error
+ * @security-severity 5.9
 * @tags security external/cwe/cwe-20
 */

--- a/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPath.ql
@@ -3,6 +3,7 @@
 * @description Accessing paths influenced by users can allow an attacker to access unexpected resources.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 6.4
 * @precision high
 * @id java/path-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-022/TaintedPathLocal.ql
@@ -3,6 +3,7 @@
 * @description Accessing paths influenced by users can allow an attacker to access unexpected resources.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 6.4
 * @precision medium
 * @id java/path-injection-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql
+++ b/java/ql/src/Security/CWE/CWE-022/ZipSlip.ql
@@ -6,6 +6,7 @@
 * @kind path-problem
 * @id java/zipslip
 * @problem.severity error
+ * @security-severity 6.4
 * @precision high
 * @tags security
 *       external/cwe/cwe-022
--- a/java/ql/src/Security/CWE/CWE-078/ExecRelative.ql
+++ b/java/ql/src/Security/CWE/CWE-078/ExecRelative.ql
@@ -4,6 +4,7 @@
 *              malicious changes in the PATH environment variable.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/relative-path-command
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-078/ExecTainted.ql
+++ b/java/ql/src/Security/CWE/CWE-078/ExecTainted.ql
@@ -4,6 +4,7 @@
 *              changes in the strings.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/command-line-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-078/ExecTaintedLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-078/ExecTaintedLocal.ql
@@ -4,6 +4,7 @@
 *              changes in the strings.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/command-line-injection-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-078/ExecUnescaped.ql
+++ b/java/ql/src/Security/CWE/CWE-078/ExecUnescaped.ql
@@ -4,6 +4,7 @@
 *              insertion of special characters in the strings.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/concatenated-command-line
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-079/XSS.ql
+++ b/java/ql/src/Security/CWE/CWE-079/XSS.ql
@@ -4,6 +4,7 @@
 *              allows for a cross-site scripting vulnerability.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 2.9
 * @precision high
 * @id java/xss
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-079/XSSLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-079/XSSLocal.ql
@@ -4,6 +4,7 @@
 *              allows for a cross-site scripting vulnerability.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 2.9
 * @precision medium
 * @id java/xss-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-089/SqlTainted.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlTainted.ql
@@ -4,6 +4,7 @@
 *              malicious code by the user.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 6.4
 * @precision high
 * @id java/sql-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-089/SqlTaintedLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlTaintedLocal.ql
@@ -4,6 +4,7 @@
 *              malicious code by the user.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 6.4
 * @precision medium
 * @id java/sql-injection-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-089/SqlUnescaped.ql
+++ b/java/ql/src/Security/CWE/CWE-089/SqlUnescaped.ql
@@ -4,6 +4,7 @@
 *              characters is vulnerable to insertion of malicious code.
 * @kind problem
 * @problem.severity error
+ * @security-severity 6.4
 * @precision high
 * @id java/concatenated-sql-query
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-090/LdapInjection.ql
+++ b/java/ql/src/Security/CWE/CWE-090/LdapInjection.ql
@@ -4,6 +4,7 @@
 *              malicious LDAP code by the user.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/ldap-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql
+++ b/java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql
@@ -3,6 +3,7 @@
 * @description User-controlled data may be evaluated as a Java EL expression, leading to arbitrary code execution.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 10.0
 * @precision high
 * @id java/insecure-bean-validation
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-094/JexlInjection.ql
+++ b/java/ql/src/Security/CWE/CWE-094/JexlInjection.ql
@@ -4,6 +4,7 @@
 *              may lead to arbitrary code execution.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 10.0
 * @precision high
 * @id java/jexl-expression-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-1104/MavenPomDependsOnBintray.ql
+++ b/java/ql/src/Security/CWE/CWE-1104/MavenPomDependsOnBintray.ql
@@ -3,6 +3,7 @@
 * @description Using a deprecated artifact repository may eventually give attackers access for a supply chain attack.
 * @kind problem
 * @problem.severity error
+ * @security-severity 6.5
 * @precision very-high
 * @id java/maven/dependency-upon-bintray
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql
+++ b/java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql
@@ -5,6 +5,7 @@
 *              an HTTP header.
 * @kind problem
 * @problem.severity error
+ * @security-severity 3.6
 * @precision high
 * @id java/netty-http-response-splitting
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-113/ResponseSplitting.ql
+++ b/java/ql/src/Security/CWE/CWE-113/ResponseSplitting.ql
@@ -4,6 +4,7 @@
 *              makes code vulnerable to attack by header splitting.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 3.6
 * @precision high
 * @id java/http-response-splitting
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-113/ResponseSplittingLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-113/ResponseSplittingLocal.ql
@@ -4,6 +4,7 @@
 *              makes code vulnerable to attack by header splitting.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 3.6
 * @precision medium
 * @id java/http-response-splitting-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstruction.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstruction.ql
@@ -3,6 +3,7 @@
 * @description Using unvalidated external input as the argument to a construction of an array can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-construction
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstructionCodeSpecified.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstructionCodeSpecified.ql
@@ -4,6 +4,7 @@
 *              a construction of an array can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-construction-code-specified
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstructionLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstructionLocal.ql
@@ -4,6 +4,7 @@
 *              a construction of an array can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-construction-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndex.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndex.ql
@@ -3,6 +3,7 @@
 * @description Using external input as an index to an array, without proper validation, can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-index
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndexCodeSpecified.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndexCodeSpecified.ql
@@ -4,6 +4,7 @@
 *              proper validation, can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-index-code-specified
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndexLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayIndexLocal.ql
@@ -4,6 +4,7 @@
 *              proper validation, can lead to index out of bound exceptions.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/improper-validation-of-array-index-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-134/ExternallyControlledFormatString.ql
+++ b/java/ql/src/Security/CWE/CWE-134/ExternallyControlledFormatString.ql
@@ -3,6 +3,7 @@
 * @description Using external input in format strings can lead to exceptions or information leaks.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 6.9
 * @precision high
 * @id java/tainted-format-string
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-134/ExternallyControlledFormatStringLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-134/ExternallyControlledFormatStringLocal.ql
@@ -3,6 +3,7 @@
 * @description Using external input in format strings can lead to exceptions or information leaks.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 6.9
 * @precision medium
 * @id java/tainted-format-string-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql
+++ b/java/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql
@@ -4,6 +4,7 @@
 *              overflows.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/tainted-arithmetic
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-190/ArithmeticTaintedLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-190/ArithmeticTaintedLocal.ql
@@ -4,6 +4,7 @@
 *              overflows.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/tainted-arithmetic-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-190/ArithmeticUncontrolled.ql
+++ b/java/ql/src/Security/CWE/CWE-190/ArithmeticUncontrolled.ql
@@ -4,6 +4,7 @@
 *              overflows.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/uncontrolled-arithmetic
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-190/ArithmeticWithExtremeValues.ql
+++ b/java/ql/src/Security/CWE/CWE-190/ArithmeticWithExtremeValues.ql
@@ -4,6 +4,7 @@
 *              is then used in an arithmetic expression, this may result in an overflow.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/extreme-value-arithmetic
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-190/ComparisonWithWiderType.ql
+++ b/java/ql/src/Security/CWE/CWE-190/ComparisonWithWiderType.ql
@@ -4,6 +4,7 @@
 *              to behave unexpectedly.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/comparison-with-wider-type
 * @tags reliability
--- a/java/ql/src/Security/CWE/CWE-209/StackTraceExposure.ql
+++ b/java/ql/src/Security/CWE/CWE-209/StackTraceExposure.ql
@@ -5,6 +5,7 @@
 *              that are useful to an attacker for developing a subsequent exploit.
 * @kind problem
 * @problem.severity error
+ * @security-severity 3.6
 * @precision high
 * @id java/stack-trace-exposure
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql
+++ b/java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql
@@ -3,6 +3,7 @@
 * @description Marking a certificate as valid for a host without checking the certificate hostname allows an attacker to perform a machine-in-the-middle attack.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 4.9
 * @precision high
 * @id java/unsafe-hostname-verification
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-312/CleartextStorageClass.ql
+++ b/java/ql/src/Security/CWE/CWE-312/CleartextStorageClass.ql
@@ -3,6 +3,7 @@
 * @description Storing sensitive information in cleartext can expose it to an attacker.
 * @kind problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/cleartext-storage-in-class
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-312/CleartextStorageCookie.ql
+++ b/java/ql/src/Security/CWE/CWE-312/CleartextStorageCookie.ql
@@ -3,6 +3,7 @@
 * @description Storing sensitive information in cleartext can expose it to an attacker.
 * @kind problem
 * @problem.severity error
+ * @security-severity 2.9
 * @precision high
 * @id java/cleartext-storage-in-cookie
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-312/CleartextStorageProperties.ql
+++ b/java/ql/src/Security/CWE/CWE-312/CleartextStorageProperties.ql
@@ -3,6 +3,7 @@
 * @description Storing sensitive information in cleartext can expose it to an attacker.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 6.4
 * @precision medium
 * @id java/cleartext-storage-in-properties
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-319/HttpsUrls.ql
+++ b/java/ql/src/Security/CWE/CWE-319/HttpsUrls.ql
@@ -3,6 +3,7 @@
 * @description Non-HTTPS connections can be intercepted by third parties.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.2
 * @precision medium
 * @id java/non-https-url
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-319/UseSSL.ql
+++ b/java/ql/src/Security/CWE/CWE-319/UseSSL.ql
@@ -3,6 +3,7 @@
 * @description Non-SSL connections can be intercepted by third parties.
 * @kind problem
 * @problem.severity recommendation
+ * @security-severity 5.2
 * @precision medium
 * @id java/non-ssl-connection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-319/UseSSLSocketFactories.ql
+++ b/java/ql/src/Security/CWE/CWE-319/UseSSLSocketFactories.ql
@@ -4,6 +4,7 @@
 *              third parties.
 * @kind problem
 * @problem.severity recommendation
+ * @security-severity 5.2
 * @precision medium
 * @id java/non-ssl-socket-factory
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.ql
+++ b/java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.ql
@@ -3,6 +3,7 @@
 * @description Using broken or weak cryptographic algorithms can allow an attacker to compromise security.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.2
 * @precision high
 * @id java/weak-cryptographic-algorithm
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
+++ b/java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
@@ -3,6 +3,7 @@
 * @description Using broken or weak cryptographic algorithms can allow an attacker to compromise security.
 * @kind path-problem
 * @problem.severity warning
+ * @security-severity 5.2
 * @precision medium
 * @id java/potentially-weak-cryptographic-algorithm
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-335/PredictableSeed.ql
+++ b/java/ql/src/Security/CWE/CWE-335/PredictableSeed.ql
@@ -3,9 +3,11 @@
 * @description Using a predictable seed in a pseudo-random number generator can lead to predictability of the numbers generated by it.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/predictable-seed
 * @tags security
+ *       external/cwe/cwe-335
 */

 import java
--- a/java/ql/src/Security/CWE/CWE-338/JHipsterGeneratedPRNG.ql
+++ b/java/ql/src/Security/CWE/CWE-338/JHipsterGeneratedPRNG.ql
@@ -3,6 +3,7 @@
 * @description Using a vulnerable version of JHipster to generate random numbers makes it easier for attackers to take over accounts.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision very-high
 * @id java/jhipster-prng
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-352/SpringCSRFProtection.ql
+++ b/java/ql/src/Security/CWE/CWE-352/SpringCSRFProtection.ql
@@ -4,6 +4,7 @@
 *              a Cross-Site Request Forgery (CSRF) attack.
 * @kind problem
 * @problem.severity error
+ * @security-severity 6.4
 * @precision high
 * @id java/spring-disabled-csrf-protection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-367/TOCTOURace.ql
+++ b/java/ql/src/Security/CWE/CWE-367/TOCTOURace.ql
@@ -4,6 +4,7 @@
 *              if the state may be changed between the check and use.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 5.9
 * @precision medium
 * @id java/toctou-race-condition
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-421/SocketAuthRace.ql
+++ b/java/ql/src/Security/CWE/CWE-421/SocketAuthRace.ql
@@ -3,6 +3,7 @@
 * @description Opening a socket after authenticating via a different channel may allow an attacker to connect to the port first.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 10.0
 * @precision medium
 * @id java/socket-auth-race-condition
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql
+++ b/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql
@@ -4,6 +4,7 @@
 *              execute arbitrary code.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/unsafe-deserialization
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-601/UrlRedirect.ql
+++ b/java/ql/src/Security/CWE/CWE-601/UrlRedirect.ql
@@ -4,6 +4,7 @@
 *              may cause redirection to malicious web sites.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 2.7
 * @precision high
 * @id java/unvalidated-url-redirection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-601/UrlRedirectLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-601/UrlRedirectLocal.ql
@@ -4,6 +4,7 @@
 *              may cause redirection to malicious web sites.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 2.7
 * @precision medium
 * @id java/unvalidated-url-redirection-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-611/XXE.ql
+++ b/java/ql/src/Security/CWE/CWE-611/XXE.ql
@@ -4,6 +4,7 @@
 * references may lead to disclosure of confidential data or denial of service.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/xxe
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql
+++ b/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql
@@ -4,6 +4,7 @@
 *              interception.
 * @kind problem
 * @problem.severity error
+ * @security-severity 2.9
 * @precision high
 * @id java/insecure-cookie
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-643/XPathInjection.ql
+++ b/java/ql/src/Security/CWE/CWE-643/XPathInjection.ql
@@ -4,6 +4,7 @@
 *              malicious code by the user.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/xml/xpath-injection
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-676/PotentiallyDangerousFunction.ql
+++ b/java/ql/src/Security/CWE/CWE-676/PotentiallyDangerousFunction.ql
@@ -3,6 +3,7 @@
 * @description Certain standard library routines are dangerous to call.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 10.0
 * @precision medium
 * @id java/potentially-dangerous-function
 * @tags reliability
--- a/java/ql/src/Security/CWE/CWE-681/NumericCastTainted.ql
+++ b/java/ql/src/Security/CWE/CWE-681/NumericCastTainted.ql
@@ -4,6 +4,7 @@
 *              can cause unexpected truncation.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/tainted-numeric-cast
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-681/NumericCastTaintedLocal.ql
+++ b/java/ql/src/Security/CWE/CWE-681/NumericCastTaintedLocal.ql
@@ -4,6 +4,7 @@
 *              can cause unexpected truncation.
 * @kind path-problem
 * @problem.severity recommendation
+ * @security-severity 5.9
 * @precision medium
 * @id java/tainted-numeric-cast-local
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-732/ReadingFromWorldWritableFile.ql
+++ b/java/ql/src/Security/CWE/CWE-732/ReadingFromWorldWritableFile.ql
@@ -4,6 +4,7 @@
 *              the file may be modified or removed by external actors.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/world-writable-file-read
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsApiCall.ql
+++ b/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsApiCall.ql
@@ -3,6 +3,7 @@
 * @description Using a hard-coded credential in a call to a sensitive Java API may compromise security.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision medium
 * @id java/hardcoded-credential-api-call
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsComparison.ql
+++ b/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsComparison.ql
@@ -3,6 +3,7 @@
 * @description Comparing a parameter to a hard-coded credential may compromise security.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision low
 * @id java/hardcoded-credential-comparison
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsSourceCall.ql
+++ b/java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsSourceCall.ql
@@ -3,6 +3,7 @@
 * @description Using a hard-coded credential in a sensitive call may compromise security.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision low
 * @id java/hardcoded-credential-sensitive-call
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-798/HardcodedPasswordField.ql
+++ b/java/ql/src/Security/CWE/CWE-798/HardcodedPasswordField.ql
@@ -3,6 +3,7 @@
 * @description Hard-coding a password string may compromise security.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision low
 * @id java/hardcoded-password-field
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql
+++ b/java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql
@@ -4,6 +4,7 @@
 *              passing through authentication systems.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision medium
 * @id java/user-controlled-bypass
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-807/TaintedPermissionsCheck.ql
+++ b/java/ql/src/Security/CWE/CWE-807/TaintedPermissionsCheck.ql
@@ -4,6 +4,7 @@
 *              permissions being granted.
 * @kind path-problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision high
 * @id java/tainted-permissions-check
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql
+++ b/java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql
@@ -3,6 +3,7 @@
 * @description Non-HTTPS connections can be intercepted by third parties.
 * @kind problem
 * @problem.severity error
+ * @security-severity 5.9
 * @precision very-high
 * @id java/maven/non-https-url
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-833/LockOrderInconsistency.ql
+++ b/java/ql/src/Security/CWE/CWE-833/LockOrderInconsistency.ql
@@ -3,6 +3,7 @@
 * @description Acquiring multiple locks in a different order may cause deadlock.
 * @kind problem
 * @problem.severity recommendation
+ * @security-severity 6.9
 * @precision medium
 * @id java/lock-order-inconsistency
 * @tags security
--- a/java/ql/src/Security/CWE/CWE-835/InfiniteLoop.ql
+++ b/java/ql/src/Security/CWE/CWE-835/InfiniteLoop.ql
@@ -5,6 +5,7 @@
 *              looping.
 * @kind problem
 * @problem.severity warning
+ * @security-severity 3.6
 * @precision medium
 * @id java/unreachable-exit-in-loop
 * @tags security