Get up-to-the-minute news and opinions, plus access to a wide assortment of IT security resources that will keep you current and informed.

Keep me logged in Forgot your password?

Please wait...

Please wait...

Consultant's View Articles

The Common Vulnerability Scoring System: Get your threat priorities right

Gunter Ollman March 06, 2006

Over the years, I've seen and used a diverse range of methods to evaluate and explain the risks associated with a particular security threat or vulnerability. Depending on the audience and the nature of the environment being evaluated, there has always been - and always will be - a frequent need to reclassify the severity of a finding. This is particularly relevant when making use of findings derived from automated security tools.