CVSS: Common Vulnerability Scoring System in Cybersecurity
CVSS stands for Common Vulnerability Scoring System. The Common Vulnerability Scoring System is a standardized framework for rating the severity of security vulnerabilities on a 0-10 scale. CVSS scores factor in exploitability, impact, and environmental context to produce a numeric severity rating (None, Low, Medium, High, Critical).
How CVSS Is Used in Cybersecurity
Security engineers use CVSS scores to prioritize which vulnerabilities to patch first based on severity and exploitability. GRC analysts set SLA thresholds tied to CVSS ratings, requiring critical findings to be remediated within defined timeframes. CISOs reference CVSS metrics in risk reports to communicate vulnerability exposure to executive leadership.
Read the full glossary entry: Common Vulnerability Scoring System in Cybersecurity
Cybersecurity Roles That Work with CVSS
Related Cybersecurity Acronyms
Frequently asked questions
What does CVSS stand for?
CVSS stands for Common Vulnerability Scoring System. The Common Vulnerability Scoring System is a standardized framework for rating the severity of security vulnerabilities on a 0-10 scale. CVSS scores factor in exploitability, impact, and environmental context to produce a numeric severity rating (None, Low, Medium, High, Critical).
What is CVSS used for in cybersecurity?
Security engineers use CVSS scores to prioritize which vulnerabilities to patch first based on severity and exploitability. GRC analysts set SLA thresholds tied to CVSS ratings, requiring critical findings to be remediated within defined timeframes. CISOs reference CVSS metrics in risk reports to communicate vulnerability exposure to executive leadership.
Sources
Where to go next
Three next steps depending on where you are. The first two are free.
Free · 2 minutes
Start with the AI Risk Score
Two minutes. Tells you how exposed your current role is to AI automation and which defensive moves carry the best return.
Start the AI Risk Score →Paid program · $147-$597
Aligned course: Career Transition
Capstone reviewed by the founder, published rubric, Ed25519-signed verifiable credential on completion.
View the course →Free account
Save your results and track progress
A free account stores your assessments, recommendations, and an exportable copy of your Career DNA. No card needed.
Create your account →Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.