CyberGuard dictionary / Vulnerability Management
Common Vulnerability Scoring System
Also known as CVSS
A framework for describing and scoring characteristics of a vulnerability.
In simple terms
CVSS gives a structured severity description, but it is not a complete measure of your own risk.
Technical explanation
Its metrics describe factors such as attack complexity and impact; local exposure, active exploitation, and business context require separate consideration.
CVSS describes technical severity through standardized metrics. It is an input to prioritization, not a complete measure of business risk or proof that exploitation is occurring.
Examples in practice
Two organizations assign different remediation urgency to the same CVSS score because only one exposes the affected service publicly.
A high-scoring flaw affects an isolated lab, while a lower-scoring flaw is exposed on the payment portal. The team documents why the portal issue is handled first.
Why it matters
Treating the score as the only priority can misdirect repair effort.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.