ZAP includes the following classifications for all of the vulnerabilities it finds wherever possible: WASC Threat Classification MITRE’s Common Weakness Enumeration
