점수 수정 Update Scores점수 초기화 Reset Scores기본 측정 Base Metrics임시 측정 Temporal Metrics환경 측정 Environmental Metrics전체 Overall기본 측정 Base Metrics초기에 발견 및 분석 그리고 분류되면 초기 정보는 완벽하고 정확한것으로 간주하고. 취약점의 특정 관점은 변경되지 않는다.
Once discovered, analyzed, and catalogued, assuming the initial information is complete and correct, there are certain aspects of a vulnerability that do not change.접근 벡터 Access Vector접근 복잡도 Access Complexity인증 여부 Authentication암호화 영향 Confidentiality Impact무결성 영향 Integrity Impact이용성 영향Availability Impact영향 바이어스(편향)Impact Bias환경 측정 Environmental Metrics서로 다른 환경들은 취약점이 그 기관과 책임자들에게 영향을 끼치는 위험에 대해 큰 관계를 가질수 있다.
Different environments can have an immense bearing on the risk that a vulnerability poses to an organization and its stakeholders.2차 손상 잠재성 Collateral Damage Potential표적 분포 Target Distribution일시적 분포 Temporal Metrics취약점의 생명주기동안 취약점에 의해 나타나는 징후의 긴급함에 영향을 주는 특정 현상이 발생될 수 있다
During the lifecycle of a vulnerability, certain events may occur which affect the urgency of the threat posed by the vulnerability.활용Exploitability치료 단계 Remediation Level신뢰보고 Report Confidencer4qzLZXVsuXfF/k8y0myE2/nbEY=x6hbxGSzTVswGGZsuCLhsavPVaA=Rfh/AgbL2R384OQtzJsTqU5uihiRQMlAV9WKks3nxrFWKp4z40FvA1Jh8TXXKaKRexSVhME5ShRb+Aipoa1I0pDfwpy7PHHO/+cNJKJB/YJUe7+8oznq19FS4ChoC0Pn81RPGpyzhbXH2lW24X/hWe2sZZBbTRbwQvObtOLvKiY=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