What is the purpose of applying the Common Vulnerability Scoring System (CVSS) to a vulnerability detected by a penetration test?

Last Updated: Oct 11, 2023
IT Exam Items Repository › Category: Ethical Hacker › What is the purpose of applying the Common Vulnerability Scoring System (CVSS) to a vulnerability detected by a penetration test?

What is the purpose of applying the Common Vulnerability Scoring System (CVSS) to a vulnerability detected by a penetration test?

  • to determine the priority of the vulnerability
  • to determine the attack vector that applies to the vulnerability
  • to accurately record how the vulnerability was detected
  • to calculate the severity of the vulnerability

Explanation: The Common Vulnerability Scoring System (CVSS) is a widely adopted standard for calculating the severity of a given vulnerability using three components: base, temporal, and environmental scores.

Related exam: 3.5.3 Quiz - Information Gathering and Vulnerability Scanning Answers

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.