Take a look at FIRST‘s FAQ wrt Supplemental Metrics. It’s so complicated you hav...

		_tk_ on March 8, 2024 \| parent \| context \| favorite \| on: Dear Linux Kernel CNA, what have you done? Take a look at FIRST‘s FAQ wrt Supplemental Metrics. It’s so complicated you have to have a degree in CVSS to properly rate a vuln and it’s also highly subjective - which they want it to be. [1]: https://www.first.org/cvss/v4.0/faq