A Medium incident is defined as one with moderate risk, limited impact, or additional exploit conditions required so that incidents needing some conditions or having constrained effects are categorized below High severity.