Glossary: Threats, Threat Actors and Motivations

CVSS

Also written: Common Vulnerability Scoring System, CVSS 3.1, CVSS 4.0, CVSS score

The Common Vulnerability Scoring System, maintained by FIRST. It gives a flaw a severity score from 0.0 to 10.0 along with a vector string. It measures how severe a flaw is, not your own risk.

Where the book teaches it

Start here
Chapter 1: Threats and Vulnerabilities
Chapter 6: What's next

Related terms

vector string severity rating CVSS metric groups EPSS CVE FIRST