This podcast examines the essential frameworks used to identify, analyze, and rank security threats, specifically focusing on the roles of MITRE and the National Vulnerability Database (NVD). While MITRE serves as the primary authority for assigning CVE identifiers, the NVD enriches this data with CVSS scores to help organizations gauge the technical severity of vulnerabilities. The documentation highlights that CVSS measures severity rather than total risk, prompting the development of more dynamic systems like Tenable’s Vulnerability Priority Rating (VPR) and CVSS v4.0. These newer models integrate threat intelligence, environmental context, and supplemental metrics such as  ...