Which scoring framework uses a 0-10 scale and a Vector String encoding Base, Temporal, and Environmental metric groups?

• A. CVSS - Common Vulnerability Scoring System
• B. NIST SP 800-53
• C. MITRE ATT&CK
• D. ISO/IEC 27001

Answer: (A)

CVSS provides a 0-10 severity score and a Vector String that encodes the Base, Temporal, and Environmental metric groups. The Base metrics capture the inherent characteristics of a vulnerability, the Temporal metrics reflect how exploitability and remediation information may change over time, and the Environmental metrics tailor the score to a specific environment. This combination of a numeric 0-10 score with a vector string that lists the metrics in those three groups is what defines CVSS. The other options are standards or frameworks for controls, threat modeling, or management systems and do not use this scoring and vector-encoding approach.