CVSS (Common Vulnerability Scoring System)

CVSS (Common Vulnerability Scoring System) is a standard way to score how severe a vulnerability is, from 0 to 10. The score is built from factors such as how easy the issue is to exploit and how much damage it could do.

A CVSS score helps teams compare and rank findings consistently. It is one input into priority; the real risk also depends on context, such as whether the affected code is actually reachable in your app.