SQL injection and Severity

Hi all,

 

What is ASM tagging SQL injection Severity as Error Severity instead of Critical Severity? The violation is "Attack signature detected" and the Attack Type "SQL-Injection" and requests are blocked but I think Severity should be "Critical"

 

Thanks in advance