What is CVSS?
The Common Vulnerability Scoring System (CVSS) is a standardized framework used to assess the severity of security vulnerabilities. It provides a numerical score based on factors such as exploitability, impact, and complexity.
CVSS scores are commonly associated with vulnerabilities listed in Common Vulnerabilities and Exposures (CVE) databases and are used by security teams to prioritize remediation efforts.
What is CVSS used for?
CVSS is used to evaluate and prioritize Vulnerabilities based on their potential impact on an organization. It helps security teams focus on high-risk issues that could be exploited through Exploits or attack vectors.
Organizations integrate CVSS into Vulnerability Management, Patch Management, and Continuous Threat Exposure Management (CTEM) programs to improve decision-making and resource allocation.