Comments on: CVSS v2 Official http://www.computerdefense.org/2007/06/cvss-v2-official/ Sharing my thoughts with the world. Wed, 16 Nov 2011 02:58:20 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: jgraver http://www.computerdefense.org/2007/06/cvss-v2-official/comment-page-1/#comment-77541 jgraver Tue, 20 Jan 2009 09:10:04 +0000 http://www.computerdefense.org/?p=337#comment-77541 CVSS v2 is a big improvement over the mess that is CVSS v1. On their History Page http://www.first.org/cvss/history.html they admit that Vendors were experiencing some wide variance in scores. There is even some mention of XSS and possible ways to score it. CVSS v2 won't end the controversy, but at least I can say CVSS Score without doing little "air quotes" with my hands. It is good to see this standard moving forward again. CVSS v2 is a big improvement over the mess that is CVSS v1. On their History Page http://www.first.org/cvss/history.html they admit that Vendors were experiencing some wide variance in scores. There is even some mention of XSS and possible ways to score it.

CVSS v2 won't end the controversy, but at least I can say CVSS Score without doing little "air quotes" with my hands.

It is good to see this standard moving forward again.

]]> By: trevor http://www.computerdefense.org/2007/06/cvss-v2-official/comment-page-1/#comment-15785 trevor Sat, 23 Jun 2007 19:07:12 +0000 http://www.computerdefense.org/?p=337#comment-15785 I agree - great step forward. I have dome some v2 scoring and it was MUCH more what I would expect I agree – great step forward. I have dome some v2 scoring and it was MUCH more what I would expect

]]> By: jgraver http://www.computerdefense.org/2007/06/cvss-v2-official/comment-page-1/#comment-15407 jgraver Thu, 21 Jun 2007 15:50:28 +0000 http://www.computerdefense.org/?p=337#comment-15407 CVSS v2 is a big improvement over the mess that is CVSS v1. On their History Page http://www.first.org/cvss/history.html they admit that Vendors were experiencing some wide variance in scores. There is even some mention of XSS and possible ways to score it. CVSS v2 won't end the controversy, but at least I can say CVSS Score without doing little "air quotes" with my hands. It is good to see this standard moving forward again. CVSS v2 is a big improvement over the mess that is CVSS v1. On their History Page http://www.first.org/cvss/history.html they admit that Vendors were experiencing some wide variance in scores. There is even some mention of XSS and possible ways to score it.

CVSS v2 won’t end the controversy, but at least I can say CVSS Score without doing little “air quotes” with my hands.

It is good to see this standard moving forward again.

]]>