Magic Numbers or Snake Oil? The Common Vulnerability Scoring System
Can a single number sum up the full significance of a security vulnerability? The CVSS attempts to prove that it can, but it has its weak points.
The Common Vulnerability Scoring System - Magic Numbers or Snake Oil? - heise Security
The Common Vulnerability Scoring System - Magic Numbers or Snake Oil? - heise Security, May 30, 2007 22:15 GMT+01
http://www.heise-security.co.uk/articles/89049
Wed, 30 May 2007 15:15:00 +0000