CVSS Scoring

Common Vulnerability Scoring System (CVSS)

The Common Vulnerability Scoring System (CVSS), is a standardized system designed to provide an open framework for communicating the characteristics and impacts of IT vulnerabilities. Simply put, a CVSS score tells us how dangerous a discovered vulnerability is. The higher the score, the more dangerous the discovered vulnerability is.

CVSS scoring is structured around three metric groups:

• Base score: This score captures the intrinsic qualities of a vulnerability. Elements considered include:

  • Attack vector (AV): This describes how the vulnerability is exploited (e.g., over the network or locally).

  • Attack complexity (AC): This indicates how complex it is to exploit the vulnerability.

  • User interaction (UI): This specifies if user ...