The Holy Grail of Vulnerability Predictions
Fabio Massacci · IEEE Security & Privacy · 2024
Scoring vulnerabilities is a hard task, and we build standards for this purpose: the Common Vulnerability Scoring System (CVSS) used by NIST is the oldest of them. It was invented by Peter Mell and Karen Scarfone, among others, to assess severity.1