Web Security · Senior · Question 72 of 75

What does a CVSS score describe?

1How many lines of code are affected
2The probability that a vulnerability is exploited this week
✓Correct answer: The technical severity of a vulnerability, from 0 to 10, based on factors like attack vector and impact

Explanation

Severity isn't the same as risk to you: reachability, exposed data and existing controls decide fix priority.

Further reading

Test yourself

Take the Web Security · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.