{"id":"finding-example","filename":"finding-example.yaml","schema":"finding","document":{"finding_id":"FIND-DEMO-001","client_id":"client-demo","asset_id":"demo-vps-01","title":"Public service is affected by a known-exploited vulnerability","weakness":"Remote code execution in an internet-facing service","impact":"rce","active_compromise":false,"known_exploited":true,"reachable":true,"internet_exposed":true,"asset_criticality":5,"confidence":5,"cvss":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","epss":0.72,"cve":"CVE-2025-12345","control_state":"absent","compensating_controls":[],"attack_path":["internet","public-service","vulnerable-component"],"evidence":[{"kind":"scanner-report","reference":"evidence://client-demo/findings/FIND-DEMO-001.json","collected_at":"2026-09-03T10:00:00-06:00","sha256":"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","redacted":true}],"owner":"platform-team","status":"validated"},"yaml":"finding_id: FIND-DEMO-001\nclient_id: client-demo\nasset_id: demo-vps-01\ntitle: Public service is affected by a known-exploited vulnerability\nweakness: Remote code execution in an internet-facing service\nimpact: rce\nactive_compromise: false\nknown_exploited: true\nreachable: true\ninternet_exposed: true\nasset_criticality: 5\nconfidence: 5\ncvss: 9.8\ncvss_vector: \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"\nepss: 0.72\ncve: CVE-2025-12345\ncontrol_state: absent\ncompensating_controls: []\nattack_path:\n  - internet\n  - public-service\n  - vulnerable-component\nevidence:\n  - kind: scanner-report\n    reference: evidence://client-demo/findings/FIND-DEMO-001.json\n    collected_at: \"2026-09-03T10:00:00-06:00\"\n    sha256: \"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"\n    redacted: true\nowner: platform-team\nstatus: validated\n"}