The term CVE refers to the record and description of reported and identified vulnerability itself. The CVSS is used to assign a numerical score to each vulnerability based on metrics that assess various aspects of the vulnerability’s impact and exploitability.