Dictionary · Hacking Techniques and Methodologies

A public standard that scores a vulnerability from 0.0 to 10.0. Version 3 qualitative bands are None, Low, Medium, High, and Critical.

The base score describes the flaw in general. Your environment can make the real priority higher or lower. Use it to sort work, not as the only decision.

Example: A flaw scored 9.8 is critical in the standard bands, but a duplicate finding on an isolated lab image may still wait behind a lower score on the public checkout path.