Skip to content
SSVC: Stakeholder-Specific Vulnerability Categorization
Policy Explorer
Initializing search
CERTCC/SSVC
Home
SSVC
SSVC Overview
SSVC How-To
Understanding SSVC
Reference
Calculator
Policy Explorer
About
SSVC: Stakeholder-Specific Vulnerability Categorization
CERTCC/SSVC
Home
SSVC
SSVC Overview
SSVC How-To
SSVC How-To
Overview
Getting Started with SSVC
Getting Started with SSVC
Intro
Prepare
Collect
Use & Respond
Summary
Stakeholder Decision Models
Stakeholder Decision Models
Supplier Decision Model
Deployer Decision Model
Coordinator Decision Models
Coordinator Decision Models
About Coordination
Coordination Triage
Publication Decision
CVSS v4 Analyst Models
CVSS v4 Analyst Models
About CVSS v4
Equivalence Set 1
Equivalence Set 2
Equivalence Set 3
Equivalence Set 4
Equivalence Set 5
Equivalence Set 6
Qualitative Severity
Customizing SSVC
Acuity Ramp
Understanding SSVC
Understanding SSVC
Intro
State of Practice
Representing Information
Representing Information
Design Goals
Formalization Options
Decision Trees
Vulnerability Management Decisions
Vulnerability Management Decisions
Intro
Stakeholders
Decisions
Items With Same Priority
Risk Tolerance and Priority
Scope
SSVC and Asset Management
Putting the Pieces Together
Worked Example
Evaluation
Related Systems
Information Sources
Limitations
Future Work
Reference
Reference
Intro
Decision Points
Decision Points
Intro
Automatable
Exploitation
Mission Impact
Public Value Added
Report Credibility
Report Public
Safety Impact
Supplier Cardinality
Supplier Contacted
Supplier Engagement
Supplier Involvement
System Exposure
Technical Impact
Value Density
Compound Decision Points
Compound Decision Points
Intro
Human Impact
Public Safety Impact
Utility
CVSS-based decision points
CVSS-based decision points
CVSS Decision Points
Qualitative Severity
Base Metrics
Base Metrics
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
Confidentiality Impact
Subsequent Confidentiality Impact
Integrity Impact
Subsequent Integrity Impact
Availability Impact
Subsequent Availability Impact
Threat Metrics
Threat Metrics
Exploit Maturity
Environmental Metrics
Environmental Metrics
Confidentiality Requirement
Integrity Requirement
Availability Requirement
Supplemental Metrics
Supplemental Metrics
Safety
Automatable
Provider Urgency
Recovery
Value Density
Vulnerability Response Effort
Older Metrics
Older Metrics
Authentication
Collateral Damage Potential
Impact Bias
Remediation Level
Report Confidence
Scope
Target Distribution
Code
Code
Intro
Namespaces
Selections
CSV Analyzer
Policy Generator
Outcomes
Doctools
Learning SSVC
Learning SSVC
Tutorials
Calculator
Policy Explorer
About
About
Intro
Community Engagement
Decision Records
Acknowledgements
Change log
Contact
SSVC Policy Explorer
Back to top