Risk Metrics
VulDB supports different risk metrics that help to determine critical vulnerabilities which need prioritized attention:
| Metric | Updates | Timing | KB Article |
|---|---|---|---|
| Internal Risk Rating | Manual | Static | Risk |
| CVSSv2, CVSSv3, CVSSv4 Base Score | Manual | Static | CVSS |
| CVSSv2, CVSSv3, CVSSv4 Temp Score | Manual | Slow | CVSS |
| Bugbounty Payout Prices | Manual | Static | Bug Bounty Price |
| Exploitability Level | Manual | Static | Exploitability |
| Exploit Prices 0day | Manual | Static | Exploit Prices |
| Exploit Prices Today | Automatic | Daily | Exploit Prices |
| Known Exploited Vulnerabilities Catalog | Manual | Slow | KEV |
| EPSS Exploit Prediction Scoring System | Automatic | Slow | EPSS |
| CTI Activity Scores | Automatic | Real-time | CTI |
| Risk Ratings of Other Sources (e.g. Qualys, Nessus, PVS, Secunia) | Manual | Static | Sources |
更新済み: 2024年06月13日 キーワード: VulDB Documentation Team