The cvss tag has no wiki summary.
4
votes
5answers
183 views
Vulnerability scoring systems
Our company is developing a web app that is used for e-commerce. We want to establish a more formal scoring system for any security related issues eventually reported by us or by our clients. The ...
2
votes
2answers
63 views
Does the CVSS impact score correpond to probability?
From http://nvd.nist.gov/cvsseq2.htm , I noticed that the CVSS standard attributes the following impact values for confidentiality, integrity and availability: 0 for none impact , 0.275 for partial ...
3
votes
1answer
60 views
CVSS Temporal Data
The CVSS standard has a "temporal" component that models the changing risk associated with a vulnerability over time, such as the publication of a working exploit. But NIST's NVD doesn't provide that ...
