Common Vulnerability Scoring System
Standard for assessing computer system vulnerabilities
Common Vulnerability Scoring System
The Common Vulnerability Scoring System (CVSS) is a framework for rating the severity of computer system vulnerabilities. Scores are calculated from metrics that approximate the ease and impact of exploits. Scores range from 0 (minor) to 10 (severe). While many use only the CVSS Base score for determining severity, temporal and environmental scores also exist, to account for the availability of mitigations and the number of vulnerable systems within an organization, respectively. The current version of CVSS (CVSS v4.0) was released in November 2023. CVSS is not intended as a method for patch prioritization, but is often used as one regardless. A more effective approach is to integrate CVSS with predictive models like the Exploit Prediction Scoring System (EPSS), to prioritize remediation based on the likelihood of real-world exploitation.
Read on Wikipedia · Image FIRST (Forum of Incident Response and Security Teams), CC BY-SA 4.0
Open boosters, collect cards and trade them. Free to play.
Play for free