In software development and operation, we are confronted with the CVSS values more and more often.
These values are an estimate of the severity of a vulnerability. This consists of different components and is then related to each other to provide a one-dimensional evaluation of a number between zero and ten. But what are the components of these numbers? How are these structured, and what possibilities are there to transpose this evaluation to one's own needs?