Common Vulnerability Scoring System (CVSS)

CVSS is an open framework articulating the severity of a threat through the principal characteristics of a vulnerability. These consist of three metric groups: base, temporal, and environmental. Once a number score is produced, the score is translated into low, medium, high, or critical risk categories.

CVSS is used worldwide as a standard measurement system for industries, organizations, and governments requiring accurate and consistent vulnerability severity scores. CVSS is owned and managed by FIRST.Org, Inc., a US-based non-profit organization.