CVSS (Common Vulnerability Scoring System)

Also written: CVSS, CVSS 3.1

A severity score from 0.0 to 10.0, worked out from a vector string of metrics. It measures how bad a bug could be, not what you should fix first.