3 ms·
As someone who has worked a lot with CVEs (and CPEs :shudder:) and had a few interactions with NVD, they are trying their best but absolutely do not have the re
by some_random 3y ago
As someone who has worked a lot with CVEs (and CPEs :shudder:) and had a few interactions with NVD, they are trying their best but absolutely do not have the resources they need. The other part of this is that CVSS 3.1 overrates severity in many cases, solving this is a major goal of the soon to be released CVSS 4.0!
- lars_francke 3y agoFor those interested, here is the latest preview of CVSS 4: https://www.first.org/cvss/v4-0/ https://www.first.org/cvss/v4-0/