What is a CVE and what is CVSS?

Answer

A CVE (Common Vulnerabilities and Exposures) is a unique public identifier, such as CVE-2021-44228, assigned to a specific known security vulnerability so everyone can reference it unambiguously. CVSS (Common Vulnerability Scoring System) is the standard that scores a vulnerability's severity from 0.0 to 10.0 based on factors like attack vector, complexity, and impact. Together they let teams identify a flaw and prioritize remediation, though the CVSS base score should be adjusted with environmental and exploit-availability context.