Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I could reword that CVSS is useless on its own - EPSS takes CVSS as an input afterall. The point here is that applying environmental scoring is the hard part. That's the algorithm that's containing the complexity.


True, I guess you might as well evaluate each vulnerability yourself without the CVSS base score.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: