Glossary: Security+ Exam Prep 2: Performance-Based Questions

CVSS (Common Vulnerability Scoring System)

Also written: CVSS score

A standard way to score how severe a security flaw is, from 0.0 to 10.0, where 9.0 and above counts as critical. The score alone should not set priority: active exploitation (such as a listing in CISA's KEV catalog) and internet exposure can put a lower-scored finding first.