...
Criticality of Vulnerability | ||||
Critical | High | Moderate | ||
Criticality of Application | >= High | At the end of the next working day | Within 7 days[1] | Within the next release, but after 6 months at the latest. |
<= Moderate | Within 7 days | Within 21 days | - | |
Table 2-1: Requirements for Vulnerability Remediation for External ApplicationApplications
In respect of internal applications, the following requirements define the point of time until a vulnerability MUST be remediated if possible or at least its exploitability prevented:
...