The Common Vulnerability Scoring System $($CVSS$)$ is an open framework for communicating the characteristics and severity of software vulnerabilities. Two common uses of CVSS are calculating the severity of vulnerabilities discovered on one's systems and as a factor in prioritization of vulnerability remediation activities.

Exercise

In this lab exercise, you will interpret the CVSS vectors found in a vulnerability scan report to assess the severity and impact of the two vulnerabilities below.