# What is a CVSS score?

CVSS (Common Vulnerability Scoring System) gives a vulnerability a severity score from 0 to 10, based on things like whether it can be attacked over the network, whether a login is needed and what an attacker can do with it. Scores of 9.0 and above are labelled critical. The score is useful for sorting, but it describes the vulnerability in general, not your situation. A critical score in a system nobody can reach may matter less than a medium score on your internet-facing VPN. Combine the score with two questions: is this exposed in our network, and is it known to be exploited right now?

FAQ: [What is…? Network and security terms](https://netsenx.com/en/faq/glossary) · https://netsenx.com/en/faq/what-is-a-cvss-score

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/problems-we-solve

## Related questions

- [What is a zero-day vulnerability?](https://netsenx.com/en/faq/what-is-a-zero-day)
- [What are TTPs?](https://netsenx.com/en/faq/what-are-ttps)
- [What is threat intelligence?](https://netsenx.com/en/faq/what-is-threat-intelligence)
- [What is an attack surface?](https://netsenx.com/en/faq/what-is-an-attack-surface)
- [What is a threat actor?](https://netsenx.com/en/faq/what-is-a-threat-actor)