there is a lot of vulnerability low impact you can find by google dork from the target so except "here low bug" use the low impact vulnerability.