Skip to content
ImpactrStart an engagement

Frameworks & standards

CVSS

Common Vulnerability Scoring System

The Common Vulnerability Scoring System (CVSS) provides a standardized way to rate vulnerability severity on a 0-10 scale using metrics for exploitability and impact. CVSS communicates severity consistently, but a score is not the same as real-world risk - context and exploitability, which offensive testing establishes, determine actual priority.

Key points

  • 0-10 severity scale from exploitability and impact metrics.
  • Standardizes communication of severity.
  • Not a substitute for proven, contextual risk.

Related

References

Impactr finds and proves whether flaws like this are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.

Start an engagement
← All terms