Glossary: Threats, Threat Actors and Motivations

CVSS metric groups

Also written: Base, Threat, Environmental, Supplemental

In CVSS 4.0, the four groups of metrics: Base (the flaw itself), Threat (whether attackers use it now), Environmental (your own setting) and Supplemental (extra facts that don't change the score).