Exploit Maturity Can Lower Scores Until Attack Evidence or PoCs Emerge. CVSS 4.0 lets threat intelligence alter a vulnerability’s enriched score without changing its Base severity, prompting experts to warn that vendors and defenders must continuously reassess exploitation, exposure and patch priority.
First seen on govinfosecurity.com
Jump to article: www.govinfosecurity.com/cve-authorities-make-score-8-look-more-like-new-10-a-32829
