Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How does NVD assign vulnerability severity scores?

April 26, 2017assign nvd scores severity vulnerability

0

Posted

How does NVD assign vulnerability severity scores?

1 Answer

0

Posted

NVD uses the Common Vulnerability Scoring System (CVSS). CVSS is an open standard for assigning vulnerability impacts that is used by a variety of organizations. NVD is the only repository of CVSS scores for all CVE vulnerabilities. See http://nvd.nist.gov/cvss.cfm?version=2 for more information.