Glossary: Vulnerability, Asset and Change Management
CVSS (Common Vulnerability Scoring System)
Also written: CVSS, CVSS base score
A 0-to-10 score for how bad a flaw could be. Prioritization adds context, which is why Alex closes an 8.1 that doesn't apply and fixes a 7.5 first.
Where the book teaches it
Related terms
CVSS vectorKEV (Known Exploited Vulnerabilities)EPSS (Exploit Prediction Scoring System)Service level