{"id":476525,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:55","modified_gmt":"2023-09-05T11:12:55","slug":"cvss","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/cvss\/","title":{"rendered":"CVSS"},"content":{"rendered":"<p>CVSS\uff08\u901a\u7528\u6f0f\u6d1e\u8bc4\u5206\u7cfb\u7edf\uff09\u662f\u4e00\u4e2a\u6807\u51c6\u5316\u7684\u5f00\u653e\u6846\u67b6\uff0c\u7528\u4e8e\u8bc4\u4f30\u8ba1\u7b97\u673a\u7cfb\u7edf\u5b89\u5168\u6f0f\u6d1e\u7684\u4e25\u91cd\u6027\u3002\u5b83\u5141\u8bb8 IT \u4e13\u4e1a\u4eba\u5458\u548c\u7ec4\u7ec7\u4ee5\u4e00\u81f4\u4e14\u77e5\u60c5\u7684\u65b9\u5f0f\u4f18\u5148\u54cd\u5e94\u5b89\u5168\u98ce\u9669\u3002 CVSS \u63d0\u4f9b\u4e86\u4e00\u79cd\u6355\u83b7\u6f0f\u6d1e\u4e3b\u8981\u7279\u5f81\u7684\u65b9\u6cd5\uff0c\u5e76\u8003\u8651\u57fa\u7840\u3001\u65f6\u95f4\u548c\u73af\u5883\u6307\u6807\uff0c\u751f\u6210\u53cd\u6620\u5176\u4e25\u91cd\u6027\u7684\u6570\u503c\u5206\u6570\u3002<\/p>\n<h2>CVSS \u7684\u8d77\u6e90<\/h2>\n<p>CVSS \u8d77\u6e90\u4e8e\u7f8e\u56fd\u56fd\u5bb6\u57fa\u7840\u8bbe\u65bd\u54a8\u8be2\u59d4\u5458\u4f1a (NIAC) \u7684\u4e00\u9879\u5021\u8bae\u3002 2000 \u5e74\u4ee3\u521d\uff0cNIAC \u8ba4\u8bc6\u5230\u9700\u8981\u4e00\u4e2a\u6807\u51c6\u7cfb\u7edf\u6765\u8bc4\u4f30 IT \u6f0f\u6d1e\uff0c\u4ee5\u66f4\u597d\u5730\u7ba1\u7406\u548c\u51cf\u8f7b\u5bf9\u57fa\u7840\u8bbe\u65bd\u7684\u6f5c\u5728\u5a01\u80c1\u3002<\/p>\n<p>CVSS \u7684\u7b2c\u4e00\u4e2a\u7248\u672c (CVSS v1) \u7531\u4e8b\u4ef6\u54cd\u5e94\u548c\u5b89\u5168\u56e2\u961f\u8bba\u575b (FIRST) \u4e8e 2005 \u5e74\u53d1\u5e03\u3002\u8be5\u5de5\u5177\u65e8\u5728\u63d0\u4f9b\u7edf\u4e00\u7684\u6f0f\u6d1e\u8bc4\u7ea7\uff0c\u5e2e\u52a9\u5b89\u5168\u54cd\u5e94\u56e2\u961f\u7684\u51b3\u7b56\u8fc7\u7a0b\u3002\u6b64\u540e\uff0c\u5b83\u4e0d\u65ad\u66f4\u65b0\u548c\u6539\u8fdb\uff0c\u7b2c\u4e09\u4e2a\u4e5f\u662f\u6700\u65b0\u7248\u672c (CVSS v3.1) \u4e8e 2019 \u5e74\u53d1\u5e03\u3002<\/p>\n<h2>\u6df1\u5165\u7814\u7a76 CVSS<\/h2>\n<p>CVSS \u7684\u4e3b\u8981\u76ee\u7684\u662f\u63d0\u4f9b\u5bf9\u6f0f\u6d1e\u4e25\u91cd\u6027\u7684\u516c\u6b63\u6d4b\u91cf\u3002\u8bc4\u5206\u7cfb\u7edf\u4f7f\u7ec4\u7ec7\u80fd\u591f\u4e13\u6ce8\u4e8e\u5176\u7cfb\u7edf\u53ef\u80fd\u9762\u4e34\u7684\u6700\u91cd\u8981\u7684\u95ee\u9898\u3002\u5b83\u4e0d\u4ec5\u4ec5\u662f\u4e00\u4e2a\u5206\u7c7b\u5de5\u5177\uff0c\u4e5f\u662f\u9488\u5bf9\u5a01\u80c1\u91c7\u53d6\u9002\u5f53\u884c\u52a8\u7684\u6307\u5357\u3002<\/p>\n<p>CVSS \u8bc4\u5206\u8303\u56f4\u4e3a 0 \u5230 10\uff0c\u5176\u4e2d 0 \u8868\u793a\u6ca1\u6709\u98ce\u9669\uff0c10 \u8868\u793a\u4e25\u91cd\u7a0b\u5ea6\u6700\u9ad8\u3002\u8fd9\u4e9b\u5206\u6570\u662f\u6839\u636e\u4e09\u4e2a\u6307\u6807\u7ec4\u8ba1\u7b97\u7684\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u57fa\u672c\u6307\u6807<\/strong>\uff1a\u8fd9\u4e9b\u662f\u968f\u65f6\u95f4\u548c\u7528\u6237\u73af\u5883\u53d8\u5316\u7684\u6f0f\u6d1e\u7279\u5f81\uff0c\u4f8b\u5982\u653b\u51fb\u5411\u91cf\u3001\u590d\u6742\u6027\u3001\u6240\u9700\u6743\u9650\u3001\u7528\u6237\u4ea4\u4e92\u3001\u8303\u56f4\u4ee5\u53ca\u5bf9\u673a\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u7684\u5f71\u54cd\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u65f6\u95f4\u6307\u6807<\/strong>\uff1a\u8fd9\u4e9b\u6307\u6807\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u800c\u53d8\u5316\uff0c\u5e76\u5904\u7406\u6f0f\u6d1e\u7684\u5f53\u524d\u72b6\u6001\u3002\u5b83\u4eec\u5305\u62ec\u53ef\u5229\u7528\u6027\u3001\u4fee\u590d\u7ea7\u522b\u548c\u62a5\u544a\u7f6e\u4fe1\u5ea6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u73af\u5883\u6307\u6807<\/strong>\uff1a\u8fd9\u4e9b\u6307\u6807\u7279\u5b9a\u4e8e\u7528\u6237\u7684\u73af\u5883\uff0c\u4f8b\u5982\u6f5c\u5728\u7684\u9644\u5e26\u635f\u5bb3\u3001\u76ee\u6807\u5206\u5e03\u548c\u5b89\u5168\u8981\u6c42\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u63ed\u5f00 CVSS \u6846\u67b6\u7684\u9762\u7eb1<\/h2>\n<p>CVSS \u6846\u67b6\u65e8\u5728\u4ee5\u4e00\u81f4\u4e14\u6613\u4e8e\u7406\u89e3\u7684\u683c\u5f0f\u6355\u83b7\u548c\u4f20\u8fbe\u6709\u5173\u6f0f\u6d1e\u7684\u4fe1\u606f\u3002\u5176\u7ed3\u6784\u57fa\u4e8e\u5411\u91cf\u5b57\u7b26\u4e32\u548c\u8bc4\u5206\u673a\u5236\uff1a<\/p>\n<ul>\n<li>\n<p><strong>\u77e2\u91cf\u5b57\u7b26\u4e32<\/strong>\uff1a\u8fd9\u4e9b\u662f\u7528\u4e8e\u8ba1\u7b97\u5206\u6570\u7684\u6307\u6807\u7684\u7b80\u5355\u6587\u672c\u8868\u793a\u3002\u6bcf\u4e2a\u6307\u6807\u90fd\u6709\u4e00\u4e2a\u503c\u6765\u8868\u793a\u5176\u6f5c\u5728\u5f71\u54cd\u3002\u4f8b\u5982\uff0c\u5728 CVSS v3.1 \u4e2d\uff0c\u5411\u91cf\u5b57\u7b26\u4e32\u53ef\u80fd\u5982\u4e0b\u6240\u793a\uff1aCVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A \uff1aH\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8bc4\u5206\u673a\u5236<\/strong>\uff1a\u4e3a\u5411\u91cf\u5b57\u7b26\u4e32\u4e2d\u7684\u6307\u6807\u8d4b\u503c\u540e\uff0c\u5e94\u7528\u516c\u5f0f\u751f\u6210\u57fa\u672c\u5206\u6570\u3002\u7136\u540e\u4f7f\u7528\u4e0d\u540c\u7684\u516c\u5f0f\u4ece\u57fa\u672c\u5206\u6570\u4e2d\u5f97\u51fa\u65f6\u95f4\u548c\u73af\u5883\u5206\u6570\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>CVSS \u7684\u4e3b\u8981\u7279\u70b9<\/h2>\n<p>CVSS \u6846\u67b6\u7684\u4e00\u4e9b\u663e\u7740\u7279\u5f81\u5305\u62ec\uff1a<\/p>\n<ul>\n<li>\u6807\u51c6\u5316\u8bc4\u5206\u7cfb\u7edf\u53ef\u5b9e\u73b0\u4e00\u81f4\u7684\u6f0f\u6d1e\u8bc4\u4f30<\/li>\n<li>\u5e7f\u6cdb\u9002\u7528\u4e8e\u5404\u79cd\u7c7b\u578b\u7684\u7cfb\u7edf\u548c\u6f0f\u6d1e<\/li>\n<li>\u5141\u8bb8\u8fdb\u884c\u65f6\u95f4\u548c\u73af\u5883\u7684\u7279\u5b9a\u8c03\u6574<\/li>\n<li>\u900f\u660e\u516c\u5f00\uff0c\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u4f7f\u7528<\/li>\n<li>\u8be6\u7ec6\u7684\u6307\u6807\u53ef\u63d0\u4f9b\u5bf9\u6f0f\u6d1e\u7684\u6df1\u5165\u6d1e\u5bdf<\/li>\n<li>\u65e8\u5728\u5e2e\u52a9\u786e\u5b9a\u4fee\u590d\u5de5\u4f5c\u7684\u4f18\u5148\u987a\u5e8f<\/li>\n<\/ul>\n<h2>CVSS \u7684\u7c7b\u578b<\/h2>\n<p>\u76ee\u524dCVSS\u5df2\u7ecf\u53d1\u5e03\u4e86\u4e09\u4e2a\u7248\u672c\uff1a<\/p>\n<ol>\n<li><strong>CVSS v1<\/strong> (2005)\uff1a\u521d\u59cb\u7248\u672c\uff0c\u63d0\u4f9b\u4e86\u8bc4\u4f30 IT \u6f0f\u6d1e\u7684\u6807\u51c6\u5316\u65b9\u6cd5\u3002<\/li>\n<li><strong>CVSS v2<\/strong> (2007)\uff1a\u5728\u7b2c\u4e00\u4e2a\u7248\u672c\u7684\u57fa\u7840\u4e0a\u8fdb\u884c\u4e86\u6539\u8fdb\uff0c\u63d0\u4f9b\u4e86\u66f4\u7cbe\u7ec6\u7684\u6307\u6807\uff0c\u5e76\u5f15\u5165\u4e86\u65f6\u95f4\u548c\u73af\u5883\u5206\u6570\u3002<\/li>\n<li><strong>CVSS v3.1<\/strong> (2019)\uff1a\u6700\u65b0\u7248\u672c\uff0c\u5bf9\u57fa\u7840\u3001\u65f6\u95f4\u548c\u73af\u5883\u6307\u6807\u7684\u5b9a\u4e49\u8fdb\u884c\u4e86\u8fdb\u4e00\u6b65\u6539\u8fdb\u548c\u6f84\u6e05\u3002<\/li>\n<\/ol>\n<h2>\u4f7f\u7528 CVSS\uff1a\u95ee\u9898\u548c\u89e3\u51b3\u65b9\u6848<\/h2>\n<p>CVSS \u7684\u4e3b\u8981\u5e94\u7528\u662f\u6f0f\u6d1e\u7ba1\u7406\u548c\u4e8b\u4ef6\u54cd\u5e94\u6d41\u7a0b\u3002\u7ec4\u7ec7\u4f7f\u7528 CVSS \u5206\u6570\u6839\u636e\u6f0f\u6d1e\u7684\u4e25\u91cd\u6027\u786e\u5b9a\u4fee\u590d\u5de5\u4f5c\u7684\u4f18\u5148\u7ea7\u3002\u7136\u800c\uff0c\u8bc4\u5206\u7cfb\u7edf\u6ca1\u6709\u8003\u8651\u7ec4\u7ec7\u7684\u4e1a\u52a1\u73af\u5883\uff0c\u5982\u679c\u5355\u72ec\u4f7f\u7528\uff0c\u53ef\u80fd\u4f1a\u5bfc\u81f4\u8d44\u6e90\u5206\u914d\u6548\u7387\u4f4e\u4e0b\u3002<\/p>\n<p>\u89e3\u51b3\u65b9\u6848\u662f\u5c06 CVSS \u5206\u6570\u7eb3\u5165\u8003\u8651\u7279\u5b9a\u4e1a\u52a1\u5f71\u54cd\u548c\u5b89\u5168\u8981\u6c42\u7684\u66f4\u5927\u98ce\u9669\u7ba1\u7406\u6846\u67b6\u4e2d\u3002\u8fd9\u6837\uff0c\u516c\u53f8\u5c31\u53ef\u4ee5\u521b\u5efa\u4e00\u79cd\u5e73\u8861\u7684\u6f0f\u6d1e\u7ba1\u7406\u65b9\u6cd5\u3002<\/p>\n<h2>CVSS \u4e0e\u5176\u4ed6\u6807\u51c6\u7684\u6bd4\u8f83<\/h2>\n<p>\u8fd8\u6709\u5176\u4ed6\u7cfb\u7edf\u53ef\u7528\u4e8e\u8bc4\u4f30 IT \u6f0f\u6d1e\uff0c\u4f46 CVSS \u56e0\u5176\u7efc\u5408\u6027\u3001\u5f00\u653e\u6027\u548c\u5e7f\u6cdb\u91c7\u7528\u800c\u8131\u9896\u800c\u51fa\u3002\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u77ed\u7684\u6bd4\u8f83\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>CVSS<\/th>\n<th>OWASP \u98ce\u9669\u8bc4\u7ea7\u65b9\u6cd5<\/th>\n<th>\u6050\u60e7<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u5f00\u653e\u6807\u51c6<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<td>\u4e0d<\/td>\n<\/tr>\n<tr>\n<td>\u5206\u6570\u8303\u56f4<\/td>\n<td>0-10<\/td>\n<td>\u98ce\u9669\u7ea7\u522b\uff08\u4f4e\u81f3\u4e25\u91cd\uff09<\/td>\n<td>0-10<\/td>\n<\/tr>\n<tr>\n<td>\u56e0\u7d20<\/td>\n<td>\u4fdd\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u3001\u53ef\u7528\u6027\u3001\u53ef\u5229\u7528\u6027\u3001\u8865\u6551\u3001\u62a5\u544a\u7f6e\u4fe1\u5ea6<\/td>\n<td>\u5a01\u80c1\u4ee3\u7406\u3001\u6f0f\u6d1e\u3001\u5f71\u54cd<\/td>\n<td>\u635f\u574f\u3001\u53ef\u91cd\u590d\u6027\u3001\u53ef\u5229\u7528\u6027\u3001\u53d7\u5f71\u54cd\u7684\u7528\u6237\u3001\u53ef\u53d1\u73b0\u6027<\/td>\n<\/tr>\n<tr>\n<td>\u65f6\u95f4\u548c\u73af\u5883\u6307\u6807\u7684\u4f7f\u7528<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<td>\u4e0d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>CVSS \u7684\u672a\u6765<\/h2>\n<p>\u968f\u7740\u7f51\u7edc\u5a01\u80c1\u4e0d\u65ad\u53d1\u5c55\uff0cCVSS \u4e5f\u4f1a\u4e0d\u65ad\u53d1\u5c55\u3002\u793e\u533a\u6b63\u5728\u79ef\u6781\u81f4\u529b\u4e8e\u5b8c\u5584\u8bc4\u5206\u7cfb\u7edf\uff0c\u4ee5\u66f4\u597d\u5730\u53cd\u6620\u6f0f\u6d1e\u7684\u4e25\u91cd\u7a0b\u5ea6\u3002\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u6280\u672f\u53ef\u4ee5\u96c6\u6210\uff0c\u4f7f CVSS \u8bc4\u5206\u8fc7\u7a0b\u81ea\u52a8\u5316\u5e76\u4f7f\u5176\u66f4\u52a0\u51c6\u786e\u3002<\/p>\n<p>\u6b64\u5916\uff0cCVSS \u7684\u672a\u6765\u7248\u672c\u53ef\u80fd\u4f1a\u5305\u542b\u66f4\u591a\u6837\u5316\u7684\u6307\u6807\uff0c\u4ee5\u9002\u5e94\u4e0d\u65ad\u53d8\u5316\u7684\u7f51\u7edc\u5a01\u80c1\u5f62\u52bf\uff0c\u5305\u62ec\u7269\u8054\u7f51\u8bbe\u5907\u3001\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\u7b49\u3002<\/p>\n<h2>\u4ee3\u7406\u670d\u52a1\u5668\u548c CVSS<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\uff08\u5982 OneProxy \u63d0\u4f9b\u7684\u4ee3\u7406\u670d\u52a1\u5668\uff09\u53ef\u4ee5\u5728\u7ba1\u7406\u6f0f\u6d1e\u548c\u5229\u7528 CVSS \u5206\u6570\u65b9\u9762\u53d1\u6325\u91cd\u8981\u4f5c\u7528\u3002\u901a\u8fc7\u5145\u5f53\u5ba2\u6237\u7aef\u8bf7\u6c42\u7684\u4e2d\u4ecb\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u8fc7\u6ee4\u6389\u6076\u610f\u6d41\u91cf\uff0c\u51cf\u5c11\u653b\u51fb\u9762\u548c\u6f5c\u5728\u6f0f\u6d1e\u3002<\/p>\n<p>\u6b64\u5916\uff0c\u4f7f\u7528\u5177\u6709\u5f3a\u5927\u6f0f\u6d1e\u7ba1\u7406\u6d41\u7a0b\uff08\u5305\u62ec CVSS\uff09\u7684\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u63d0\u4f9b\u589e\u5f3a\u7684\u4fdd\u62a4\u3002\u5f53\u4ee3\u7406\u670d\u52a1\u5668\u8bb0\u5f55\u6d41\u91cf\u65f6\uff0c\u5b83\u4eec\u53ef\u4ee5\u4e3a\u5b89\u5168\u5ba1\u6838\u63d0\u4f9b\u6709\u4ef7\u503c\u7684\u6570\u636e\uff0c\u5e76\u5e2e\u52a9\u8bc6\u522b\u6f5c\u5728\u7684\u6f0f\u6d1e\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173 CVSS \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ul>\n<li><a href=\"https:\/\/www.first.org\/cvss\/user-guide\" target=\"_new\" rel=\"noopener nofollow\">\u7b2c\u4e00\u4e2a CVSS \u6307\u5357<\/a><\/li>\n<li><a href=\"https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\/v3.1\/specification-document\" target=\"_new\" rel=\"noopener nofollow\">NVD CVSS v3.1 \u89c4\u683c<\/a><\/li>\n<li><a href=\"https:\/\/www.nist.gov\/cyberframework\/online-learning\/cvss\" target=\"_new\" rel=\"noopener nofollow\">NIST \u7684 CVSS \u6982\u8ff0<\/a><\/li>\n<li><a href=\"https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\/v3-calculator\" target=\"_new\" rel=\"noopener nofollow\">CVSS\u8ba1\u7b97\u5668<\/a><\/li>\n<\/ul>\n<p>\u4e86\u89e3\u548c\u5e94\u7528 CVSS \u5bf9\u4e8e\u4efb\u4f55\u5e0c\u671b\u6539\u5584\u6f0f\u6d1e\u7ba1\u7406\u548c\u6574\u4f53\u7f51\u7edc\u5b89\u5168\u72b6\u51b5\u7684\u7ec4\u7ec7\u90fd\u81f3\u5173\u91cd\u8981\u3002\u901a\u8fc7\u5c06 CVSS \u96c6\u6210\u5230\u98ce\u9669\u8bc4\u4f30\u6846\u67b6\u4e2d\uff0c\u4f01\u4e1a\u53ef\u4ee5\u786e\u4fdd\u5bf9\u6f0f\u6d1e\u8fdb\u884c\u4f18\u5148\u6392\u5e8f\u5e76\u6709\u6548\u54cd\u5e94\u3002<\/p>","protected":false},"featured_media":476526,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476525","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CVSS: The Common Vulnerability Scoring System<\/mark>","faq_items":[{"question":"What is the Common Vulnerability Scoring System (CVSS)?","answer":"<p>CVSS is a standardized, open framework for assessing the severity of computer system security vulnerabilities. It provides a way to capture the main characteristics of a vulnerability and produce a numerical score reflecting its severity. The scores range from 0 to 10, with 0 representing no risk and 10 indicating the highest level of severity.<\/p>"},{"question":"Who developed CVSS and when was it first introduced?","answer":"<p>CVSS was initially developed by the Forum of Incident Response and Security Teams (FIRST) under the recommendation of the National Infrastructure Advisory Council (NIAC) in the United States. The first version of CVSS (CVSS v1) was introduced in 2005.<\/p>"},{"question":"What are the three metric groups used in CVSS?","answer":"<p>The three metric groups used in CVSS are Base Metrics, Temporal Metrics, and Environmental Metrics. Base Metrics are constant characteristics of a vulnerability, Temporal Metrics change over time and deal with the current state of the vulnerability, and Environmental Metrics are specific to a user\u2019s environment.<\/p>"},{"question":"What does a CVSS score range signify?","answer":"<p>CVSS scores range from 0 to 10. A score of 0 represents no risk, while a score of 10 indicates the highest level of severity or risk. The scores help organizations prioritize their responses and remediation efforts towards security vulnerabilities.<\/p>"},{"question":"How many versions of CVSS exist?","answer":"<p>There have been three versions of CVSS published so far: CVSS v1 in 2005, CVSS v2 in 2007, and CVSS v3.1 in 2019. Each version has brought refinements and improvements to the system.<\/p>"},{"question":"How does CVSS compare to other vulnerability assessment standards?","answer":"<p>While there are other systems for assessing IT vulnerabilities, CVSS stands out due to its comprehensive nature, openness, and widespread adoption. It uses a numerical scoring system and considers various factors such as confidentiality, integrity, availability, exploitability, remediation, and report confidence. It also uses temporal and environmental metrics, unlike many other standards.<\/p>"},{"question":"How can proxy servers be used with CVSS?","answer":"<p>Proxy servers, like those provided by OneProxy, can play a significant role in managing vulnerabilities and utilizing CVSS scores. They can filter out malicious traffic, reducing the attack surface and potential vulnerabilities. Additionally, they can provide valuable data for security audits and assist in identifying potential vulnerabilities when used as part of a robust vulnerability management process.<\/p>"},{"question":"What is the future perspective of CVSS?","answer":"<p>The future of CVSS includes refining the scoring system to better reflect the severity of vulnerabilities. It might incorporate AI and machine learning technologies to automate the CVSS scoring process. Furthermore, future versions may include more diverse metrics to accommodate new types of cyber threats, such as those involving IoT devices and industrial control systems.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476525\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/476526"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476525"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}