Common Vulnerability Scoring System
Definition
A standard for describing the technical severity and characteristics of a vulnerability.
Why it matters
Read the vector as well as the number. CVSS explains conditions and impact, but FIRST is clear that the Base score is severity rather than organisational risk or remediation priority.
Use it in practice
Start with authoritative evidence, record the source and freshness, and be explicit about what this term can and cannot tell you. Connect it to asset context and a named action rather than treating it as an isolated label.
Related terms
CVE · EPSS · Exploitability