Infosecurity-magazine.com

Beyond the Score: Rethinking Vulnerability Management in a Contextual Era

Picture the scenario: you log into your vulnerability management dashboard on a Monday morning. The scan ran overnight, and the report lights up with a dozen new high-severity CVEs. One stands out ...
Hackaday

This Week In Security: CVSS 4, OAuth, And ActiveMQ

We’ve talked a few times here about the issues with the CVSS system. We’ve seen CVE farming, where a moderate issue, or even a non-issue, gets assigned a ridiculously high CVSS score. There are times ...
Dark Reading

CVSS 4.0 Offers Significantly More Patching Context

The latest version of the Common Vulnerability Scoring System (CVSS version 4.0), released last week, should enable organizations to better assess and manage the risk that a security bug might pose to ...
Network World

Understanding the Common Vulnerability Scoring System (CVSS)

Understanding the Common Vulnerability Scoring System (CVSS) Analysis Jun 9, 2008 4 mins You may have noticed over the last couple years that Cisco has been sending out its PSIRT e-mails with a Common ...
CSOonline

Security researchers find deep flaws in CVSS vulnerability scoring system

Cybersecurity experts from financial giant JPMorganChase say the cybersecurity community is being misled about the severity of vulnerabilities by the CVSS, which threatens to seriously hinder ...