漏洞管理的常用方法包括: 验收, Taking no action to fix or otherwise lessen the likelihood/impact of a vulnerability being exploited. This is typically justified when a vulnerability is deemed a low risk, 和 the cost of fixing the vulnerability is too great. 缓解, Lessening the likelihood 和/or impact of a vulnerability causing greater exposure to risk 和/or exploitation. This is sometimes necessary when a proper fix or patch isn’t yet available, 和 is ideally used as a temporary fix until remediation can be achieved. 补救, 完全固定或 修补漏洞 所以它不能被利用. If possible, this is the ideal 治疗 option for any 和 every vulnerability