Do CWE's use CVSS?
Printable View
Do CWE's use CVSS?
No, the Common Vulnerability Scoring System (CVSS) is not used by CWEs (Common Weakness Enumeration). Instead, they are given a number based on the Common Weakness Risk Analysis Framework, which gives each CWE a level of severity. This number goes from 0 to 10, with 0 meaning there is little risk and 10 meaning there is a lot of risk.