While the CVSS is a general-purpose ranking system, risk scores are tailored to organizations, taking into account their assets, exposure to cyber threats, and the impact of the vulnerabilities found. Security teams are given contextual data-based scores that help them understand the risk factor and decide which vulnerabilities to remediate first.
Risk scores help remediation teams filter out vulnerabilities that pose little to no risk, so organizations can better manage risk and improve cybersecurity.