CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

PUBLIC

This privilege allows access to data that are meant to be public.