|
|
|
|
|
by _tk_
840 days ago
|
|
Take a look at FIRST‘s FAQ wrt Supplemental Metrics. It’s so complicated you have to have a degree in CVSS to properly rate a vuln and it’s also highly subjective - which they want it to be. [1]: https://www.first.org/cvss/v4.0/faq |
|