@Ellie Indeed, and it also depends on the specific environment. In one of recent talks I've been to, it was mentioned that the medium severity CVEs, after analysis, had sometimes bigger impact than the high/critical ones. So I guess it really depends. But it won't be pretty regardless. @bagder
P