Unverified50% confidenceFactExact time
CVSS measures the technical severity of the vulnerability itself and does not reflect whether a specific organization is actually exposed or whether the vulnerability has already been exploited.
1
Sources
50%
Confidence
Long-term
Relevance
10/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA CVE itself only records the technical facts of a vulnerability and does not include the project's security governance approach, remediation strategy choices, or long-term improvement plans.69% similarUnverifiedThis weighted scoring approach is consistent with the logic of CVSS (Common Vulnerability Scoring System) in the information security field, as both reject measuring risk by the number of vulnerabilities.68% similarUnverifiedCVSS (Common Vulnerability Scoring System) is the industry's standardized framework for assessing vulnerability severity, with scores ranging from 0 to 10.67% similarVerifiedCVSS (Common Vulnerability Scoring System) is maintained by FIRST; the current mainstream version is CVSS 3.1, and vulnerabilities with a score below 4.0 are classified as low severity.67% similarVerifiedThe CVSS Common Vulnerability Scoring System classifies vulnerability severity into four levels: low, medium, high, and critical.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1091118API
curl https://kongchang.com/api/v1/knowledge/claims/1091118MCP
get_claim(id=1091118)