126 Vulnerability ManageMent
metrics together are referred to as impact metrics and are combined
in calculations to determine the total impact, which is then applied in
equations for the base score. e equations are where all the work is
performed to produce a total score for the group.
e reasons for the particular value of the metrics involves an
understanding of the relative effect an exploit would have and how
significant that metric is in the calculation of the score for the group.
e greater the effect, the higher the value. But, not all metrics are
created equal. AVs may be more important to the overall severity of a
vulnerability than complexity of the exploit. e difference between
low complexity (0.35) and high complexity (0.71) is ...