Number Of Security Vulnerabilities By CVSS Scores

Distribution of vulnerabilities by CVSS scores

CVSS Score Range		Vulnerabilities
0-1		2396
1-2		109
2-3		998
3-4		2371
4-5		16158
5-6		35690
6-7		36627
7-8		54238
8-9		27018
9+		38304
Total		213909
Weighted Average CVSS Score: 7.6

CVSS Scores Used By This Site

All CVSS scores used on this site are CVSS base scores. All CVSS data are taken from CVE vulnerability data published by National Vulnerability Database, NVD.

What is CVSS?

Common Vulnerability Scoring System , CVSS, is a vulnerability scoring system designed to provide an open and standardized method for rating IT vulnerabilities. CVSS helps organizations prioritize and coordinate a joint response to security vulnerabilities by communicating the base, temporal and environmental properties of a vulnerability. For additional information on CVSS v2, please see http://www.first.org/cvss and http://nvd.nist.gov/cvss.cfm?calculator&adv&version=2

CVSS is composed of three metric groups: Base, Temporal, and Environmental, each consisting of a set of metrics.
These metric groups are described as follows:

Base: represents the intrinsic and fundamental characteristics of a vulnerability that are constant over time and user environments.
Temporal: represents the characteristics of a vulnerability that change over time but not among user environments.
Environmental: represents the characteristics of a vulnerability that are relevant and unique to a particular user's environment.

The purpose of the CVSS base group is to define and communicate the fundamental characteristics of a vulnerability. This objective approach to characterizing vulnerabilities provides users with a clear and intuitive representation of a vulnerability. Users can then invoke the temporal and environmental groups to provide contextual information that more accurately reflects the risk to their unique environment. This allows them to make more informed decisions when trying to mitigate risks posed by the vulnerabilities.
Click here for the CVSS complete documentation published by Forum of Incident Response and Security Teams