Articles Tagged CVSS
All GeekWala articles tagged CVSS.
Vulnerability Scoring Systems Glossary
Five acronyms, five different questions about a vulnerability. This glossary defines CVSS, EPSS, CISA KEV, VEX, and SSVC in plain language, cites each to its maintaining organization, and shows how the five combine into one prioritization decision.
Your Scanner Found 200 CVEs: What to Do
Alert fatigue is the #1 reason teams ignore vulnerability scanners. A developer opens the dashboard, sees 200 red CVEs, and closes the tab. This article is the actionable playbook that turns 200 alerts into a 3-item "fix today" list using the 3-Signal Triage Method (CVSS + EPSS + KEV).
CVSS, EPSS, KEV, SSVC, and LEV Compared
Five vulnerability scoring systems compete for developer attention: CVSS, EPSS, CISA KEV, SSVC, and LEV. Each answers a different question about risk. This guide compares all five — what they measure, who maintains them, and how to combine the right signals for your team.
CVSS vs EPSS: Two Vulnerability Score Systems
CVSS and EPSS both score vulnerabilities, but they answer different questions. CVSS asks 'how bad could this be?' while EPSS asks 'will anyone exploit this?' This comparison shows where they agree, where they diverge, and why you need both.
Vulnerability Prioritization: 3-Signal Triage
Most teams waste 80% of their patching effort on vulnerabilities nobody is exploiting. The 3-Signal Triage Method combines CVSS severity, EPSS exploitation probability, and CISA KEV status into a repeatable framework that cuts noise and focuses your team on real risk.