Unverified50% confidenceFactExact time
This weighted scoring approach is consistent with the logic of CVSS (Common Vulnerability Scoring System) in the information security field, as both reject measuring risk by the number of vulnerabilities.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTraditional vulnerability scanning tools score on a per-repository or per-asset basis (e.g., CVSS scores) and cannot answer whether an attacker can chain multiple low-severity vulnerabilities into a complete attack chain.73% similarVerifiedThe CVSS Common Vulnerability Scoring System classifies vulnerability severity into four levels: low, medium, high, and critical.70% similarUnverifiedCVSS（通用漏洞评分系统）由FIRST组织维护，目前主流版本为CVSS 3.1，评分低于4.0的漏洞被归类为低危69% similarUnverifiedThe difference between CVP and traditional bug bounties is that CVP authorizes specific organizations to probe the model's cybersecurity-related capabilities at a much deeper level, involving a degree of sensitivity far beyond ordinary vulnerability reports, and therefore requires a more stringent admission mechanism.69% similarUnverifiedAgent security risks are often not code vulnerabilities but semantic-level manipulation, which is difficult to cover with conventional penetration testing tools.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/998103API
curl https://kongchang.com/api/v1/knowledge/claims/998103MCP
get_claim(id=998103)