diff --git a/java/ql/src/Security/CWE/CWE-330/WeakRandomness.ql b/java/ql/src/Security/CWE/CWE-330/WeakRandomness.ql
index b020d6148cbcd..c0d3005539bb9 100644
--- a/java/ql/src/Security/CWE/CWE-330/WeakRandomness.ql
+++ b/java/ql/src/Security/CWE/CWE-330/WeakRandomness.ql
@@ -3,6 +3,7 @@
  * @description Using a weak source of randomness may allow an attacker to predict the generated values.
  * @kind path-problem
  * @problem.severity error
+ * @security-severity 8.6
  * @precision high
  * @id java/weak-randomness
  * @tags security