Vulnerabilities’ CVSS scores are determined by evaluating the severity of their impact on affected systems, considering factors like how easily they can be exploited and the potential damage they can cause.
These scores are crucial for prioritization in a Vulnerability Management (VM) program because they help organizations identify which vulnerabilities pose the greatest risk to their systems. This allows them to address the most critical issues first and efficiently allocate their security resources.