Skip to content

SSVC v1.0 (v2019.12)

Choose a tag to compare

View all tags
@ahouseholder ahouseholder released this 12 Apr 13:40
· 1426 commits to main since this release
v1.0
a5f2db1

Many organizations use the Common Vulnerability Scoring System (CVSS) to prioritize actions during vulnerability management. This paper—the second part of a research agenda about prioritizing actions during vulnerability management—presents a testable Stakeholder-Specific Vulnerability Categorization (SSVC) that avoids some problems with the CVSS. SSVC takes the form of decision trees for different vulnerability management communities.

Assets 2
Loading