Vulnerability triage: critical ratings versus business costs
The New Stack describes a critical-severity finding on a disposable test system as an example of what CVSS can't tell you: which flaws actually cost money.
TLDR
A test database anchors The New Stack's argument about prioritizing vulnerabilities. The publisher says a critical-severity finding on a disposable system exposes a limitation of CVSS: the rating doesn't tell you which flaws actually cost money.
Combined views
548
1 Source, first seen ago