common vulnerability scoring system (CVSS)

The Common Vulnerability ScoringSystem (CVSS) is an initiative by several well-known companies to create a rating system for determining vulnerabilities in IT security.

This rating index establishes uniform, cross- platform benchmarks for the risk potential of discovered vulnerabilities. Not only external factors are included in the evaluation, but also criteria defined by the administrator.

The CVSS index defines mathematical schemes that administrators can adapt to their requirements. The CVSS rating is intended to make vulnerabilities comparable.

The definition of vulnerability is the threat to confidentiality, integrity and the availability of IT systems.