diff --git a/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java b/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java index db124a9732..d5ab8b115f 100644 --- a/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java +++ b/src/main/java/org/dependencytrack/policy/EpssPolicyEvaluator.java @@ -76,7 +76,7 @@ public boolean matches(final PolicyCondition.Operator operator, final BigDecimal case NUMERIC_GREATER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) >= 0; case NUMERIC_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) == 0; case NUMERIC_NOT_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) != 0; - case NUMERIC_LESSER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) >= 0; + case NUMERIC_LESSER_THAN_OR_EQUAL -> vulnerabilityEpss.compareTo(conditionDecimalValue) <= 0; case NUMERIC_LESS_THAN -> vulnerabilityEpss.compareTo(conditionDecimalValue) < 0; default -> { LOGGER.warn("Operator %s is not supported for EPSS conditions".formatted(operator));