CVSS Scores Are Dead. Let’s Explore 4 Alternatives

Posted on in Presentations

If a picture is worth a thousand words, then a CVSS score is worth two hundred and fifty. Join this session to explore the limitations of CVSS scores and the benefits of a risk-based approach to vulnerability scoring which factors in availability of exploits, patches, and scale of deployments. The session will wrap-up with pros and cons of the alphabet soup of options: EPSS, SSVC, VPR and more.

Allan Liska


Principal Consultant, Recorded Future

Analytics Intelligence & Response

risk management security intelligence risk & vulnerability assessment threat intelligence risk & vulnerability assessment



Share With Your Community