4 ms·
If there is a bug severity reported, the severity should be right; otherwise the score system should be entirely removed. If the CVE database was just codes an
by yankput 3y ago
If there is a bug severity reported, the severity should be right; otherwise the score system should be entirely removed.
If the CVE database was just codes and descriptions that would be ok. That’s not what people are complaining here about though
- akerl_ 3y agoI am in favor of the severity system being entirely removed. Attempting to score the vast majority of vulnerabilities against a universal axis is comical and falls apart as soon as you try any kind of real world application.