Skip to content

Glossary: Vulnerability, Asset and Change Management

CVSS (Common Vulnerability Scoring System)

Also written: CVSS, CVSS base score

A 0-to-10 score for how bad a flaw could be. Prioritization adds context, which is why Alex closes an 8.1 that doesn't apply and fixes a 7.5 first.

Where the book teaches it

Related terms

CVSS vectorKEV (Known Exploited Vulnerabilities)EPSS (Exploit Prediction Scoring System)Service level