CVSS
Technology & Computing abbreviation · Cybersecurity
| Stands for | Common Vulnerability Scoring System |
|---|---|
| Categories | Technology & Computing |
CVSS stands for Common Vulnerability Scoring System, a cybersecurity abbreviation.
An open framework for rating the severity of security vulnerabilities from 0 to 10, based on factors such as attack complexity, required privileges and impact on confidentiality, integrity and availability.
Example: Anything with a CVSS base score of 9.0 or higher must be patched within 72 hours.
Usage notes
Maintained by FIRST, the Forum of Incident Response and Security Teams; version 3.1 is widely used and version 4.0 was released in November 2023. Scores map to None, Low, Medium, High and Critical bands. Severity is not the same as risk, so teams combine CVSS with exploitation data such as CISA's Known Exploited Vulnerabilities catalog.
Related abbreviations
More cybersecurity abbreviations
- CISSP – Certified Information Systems Security Professional
- CSPM – Cloud security posture management
- CSR – Certificate signing request
- CSRF – Cross-site request forgery
- CTF – Capture the flag
- CVE – Common Vulnerabilities and Exposures
- CWE – Common Weakness Enumeration
- DAC – Discretionary access control
- DAST – Dynamic application security testing
- DDoS – Distributed denial of service
- DES – Data Encryption Standard
- DevSecOps – Development, security and operations