A security team is assessing vulnerabilities using the CVSS. They come across a vulnerability in a server application with a base score of 9.8. How should this vulnerability be classified in terms of severity?
The Common Vulnerability Scoring System (CVSS) provides a score that ranges from 0.0 to 10.0, with higher scores indicating a more severe impact of the vulnerability. The severity of scores is typically categorized as 'Low' (0.0-3.9), 'Medium' (4.0-6.9), 'High' (7.0-8.9), and 'Critical' (9.0-10.0). Therefore, a score of 9.8 falls into the 'Critical' category, indicating a very severe level of vulnerability that should be addressed as a top priority. The differentiation among categories prevents confusion and ensures that a systematic approach is followed to address vulnerabilities according to their impact.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does CVSS stand for and why is it important?
Open an interactive chat with Bash
How do the categories of CVSS scores impact vulnerability management?
Open an interactive chat with Bash
What are some common strategies to mitigate a 'Critical' vulnerability?