CVSS

acronym

securitygovernance & risk

Stands for: Common Vulnerability Scoring System

A standard 0 to 10 score that rates the severity of a vulnerability.

The Common Vulnerability Scoring System combines factors, how it is exploited, what it impacts, into a number and a vector string, so teams can compare and prioritize. It measures inherent severity, not your specific risk, which also depends on exposure and context.

Also known as: cvss, cvss score, base score

All glossary entries