Cybersecurity glossary
What is CVSS?
Also known as: Common Vulnerability Scoring System
Definition
CVSS is a standard maintained by FIRST for rating the technical severity of a vulnerability on a scale from 0 to 10.
Why it matters
The base score reflects properties such as attack vector, complexity, privileges needed and impact. It does not reflect whether the flaw is being exploited or how important the affected system is to you, so use it with KEV, EPSS and asset context.
Common questions about CVSS
See also
Sources
Related Guides
GuideSOC
9 Quick-Win AI Agent Use Cases for Security Operations
Nine high-impact, low-effort SOC tasks to hand to AI agents first, what each agent does and the metric that proves it, plus the tasks to keep human.
Read more GuideGRC
How to Conduct a Cybersecurity Risk Assessment in 7 Steps
A step-by-step method for information security risk assessment aligned with ISO 27005 and NIST SP 800-30: assets, threats, likelihood and impact scoring, risk appetite, treatment and the risk register.
Read more