Glossary: Threats, Threat Actors and Motivations

Exploit Maturity (E)

Also written: E:A, E:P, E:U, proof of concept

The key CVSS 4.0 Threat metric: attacked (A), proof of concept (P, meaning working attack code exists but no real attacks are known) or unreported (U). The same flaw scored 9.3 with E:A and 8.1 with E:U.