PMD scan results for Apex does not have priority or severity

[sirhub]

Code scanning tools generally assign CVE/CVSS scores to vulnerabilities, so that we can prioritize based on severity. Could not find it in PMD scan results for Apex code (Salesforce)