He maha ngā ngoikoretanga e pāngia ana e ngā tīma haumarutanga ipurangi i ia rā. He mea nui te kimi ko ēhea ngā tūmomo riri me aro atu ki te tuatahi. Koinei te wāhi e uru mai ai te Pūnaha Whakatau Ine Ine (CVSS). He anga whakatau mōrearea te CVSS, e tuku ana i te uara tau ki ngā ngoikoretanga, e āwhina ana i ngā tīma ki te whakatau i ngā mōrearea kia whai hua. Mā te whakamahi i ngā taputapu pēnei i te tātaitai CVSS me te tūhura i ngā mōhiohio e whakaratohia ana e te CVSS, ka taea e ngā tīma haumarutanga te hanga tere ake, atamai ake hoki.cisngā rautaki hei arotahi ki ngā tūmomo mōrearea tino kino.
Mō ngā miihini DevSecOps me CISĀe, ka māmā ake te aromatawai mōrearea mā te CVSS. Ka āwhina i te arotahi ki ngā ngoikoretanga tino nui. Mā te CVSS, ka taea e ngā tīma te noho whakamua i ngā tūmomo riri, me te whakapakari i te haumarutanga.
māramatanga He kaute mōrearea a CVSS me ōna Inenga
Ka whakaratohia e te Pūnaha Whakatau Irakoretanga Whānui (CVSS, he anga whakatau mōrearea) he pūnaha e mōhiotia ana puta noa i te ao standard mō te aromatawai i ngā ngoikoretanga pūmanawa. TUATAHI (Huihuinga o ngā Tīma Whakautu Aituā me te Haumarutanga) i whakawhanake i te CVSS hei waihanga i tētahi huarahi hanganga hei ine i te mōrearea. E ai ki te whakamārama a FIRST i roto i tā rātou tuhinga whakatakotoranga mana, ka hoatu e te pūnaha ki ngā whakahaere standardngā māramatanga kua whakapūmautia, hei āwhina i a rātou ki te whakatau i ngā ngoikoretanga me te aro atu wawe.
Mai i te tau 2026, ko te nuinga o ngā kaupapa haumarutanga kua pakeke kei te neke mai i te CVSS v3.1 ki te CVSS v4.0, he whakahoutanga e hanga hou ana i te whakaaro o ngā kaiwawao mō te kaha me te kaupapa matua o te ngoikoretanga. Heoi, ehara i te mea he whakahoutanga ngāwari te whakawhiti: kei te whakaputa a NVD i ngā kaute CVSS 4.0 me te CVSS 3.1 mō ngā CVE hou kua whakaputaina, engari kāore i te whakamaheretia te whakahou i te kaute o te pātengi raraunga hītori katoa, ko te tikanga ka pupuri tonu ngā CVE tawhito i ā rātou kaute CVSS 3.1 hei tohutoro matua mō ake tonu atu. Mena kei te hanga, kei te whakahou rānei koe i tētahi kaupapa whakahaere ngoikoretanga i te tau 2026, me tumanako ka mahi tahi ngā putanga e rua mō ngā wā kei te heke mai.
Heoi anō, ka tukuna e CVSS tētahi aromatawai whānui o ngā ngoikoretanga pūmanawa mā te whakamahi i tētahi tikanga whakatauranga pūnaha. Ka tohaina ngā kaute mai i te 0 ki te 10, ko ngā kaute teitei ake e tohu ana i ngā ngoikoretanga tino nui.
He aha ngā mōhiotanga e whakaratohia ana e CVSS mō te whakahaere mōrearea?
te Pūnaha Tohu Whakaraeraetanga (CVSS) e whakarato ana i tētahi anga hanganga mō te aromatawai i te kaha me te pānga o ngā ngoikoretanga. Mā te wehewehe i te āhua me ngā pānga o ngā hapa haumarutanga, ka āwhina a CVSS i ngā whakahaere ki te whakatau i ngā kaupapa matua o ngā mahi whakatikatika. E toru ngā inenga matua a te pūnaha:
Ngā Inenga TūāpapaKa ine ēnei i ngā āhuatanga ā-roto o tētahi ngoikoretanga kāore e rerekē i roto i te wā, i roto rānei i ngā taiao. Ko ngā taipitopito matua ko:
- Te Waehere Whakaeke (AV)Me pēhea te whakamahi i te ngoikoretanga (hei tauira, mai i tawhiti, mai i te rohe rānei).
- Te Uauatanga o te Whakaeke (AC)Te uauatanga o te whakamahi i te ngoikoretanga.
- Ngā Mana Motuhake e Hiahiatia ana (PR)Te taumata urunga e hiahiatia ana hei whakamahi i te ngoikoretanga.
- pāngaAromatawai i ngā pānga ki te noho muna, te pono, me te wātea.
Ngā Inenga WāKa aromatawaihia e ēnei inenga te ngoikore i te whanaketanga o ngā āhuatanga, pēnei i:
- Te Paunga o te Waehere WhakamahiMehemea kei te wātea te waehere whakamahi ki te marea.
- Taumata WhakaoraTe wātea o ngā whakatikatika, ngā huarahi rānei hei whakaoti rapanga.
- Pūrongo WhakaponoTe pono o ngā kōrero i pūrongotia.
Ngā Inenga TaiaoKa whakaritea e ēnei te kaute ki te horopaki motuhake o tētahi whakahaere, e whakaata ana i te pānga pakihi ahurei o tētahi ngoikoretanga. Ko ngā mea matua ko:
- Ngā Inenga Pānga Kua WhakarerekētiaKua whakarerekētia i runga i te hiranga ki ngā pūnaha motuhake.
- Nga whakaritenga haumaruTe hiranga o te noho muna, te pono, me te wātea i roto i tētahi taiao.
Mā ēnei mōhiohio ka taea e ngā tīma haumarutanga tukutuku te whai māramatanga mahi hei mārama ake i ngā ngoikoretanga, kia pai ake ai te whakarite i ngā kaupapa matua.cisMā te whakamahi i ngā taputapu pēnei i te tātaitai CVSS, ka taea e ngā tīma te whakamāori i ēnei inenga hei kaute kua whakaritea kia rite ki ngā paepae mōrearea o te whakahaere.
Te Whakamahi i te Tātaitai CVSS hei Whakarite i ngā Tūraru
Mā te tātaitai CVSS ka taea te huri i ngā kaute CVSS hei māramatanga mahi. Ka tāpirihia e ngā tīma haumarutanga ngā taipitopito ngoikoretanga motuhake hei tatau i ngā kaute mōrearea e uru ana ki ō rātou taiao. Mā tēnei tukanga ka whakarite kia whakatauria e rātou ngā kaupapa matua i runga i ngā āhuatanga o te ao tūturu, kaua i ngā horopaki ariā.
Hei tauira, mā te tātaitai CVSS ka taea e ngā tīma te tūhura he aha ngā mōhiohio e whakaratohia ana e CVSS, pērā i te āheinga ki te whakamahi, te pānga pea, me te pānga o ngā āhuatanga whakaiti i ngā taumata mōrearea. Ngā taputapu pērā i te National Vulnerability Database Tātaitai CVSS v4 whakangāwari ake i tēnei tukanga, hei āwhina i ngā tohunga haumarutanga ki te tātari i ngā ngoikoretanga kia whai hua ake.
Mā tēnei huarahi kua whakaritea kia taea ai e ngā whakahaere te arotahi ki ngā ngoikoretanga e tino tūpono ana ki ngā pūnaha nui. E ai ki te whakamārama i mua ake nei, ka whakamahia e ngā tīma ngā taputapu pēnei i te tātaitai CVSS hei tūhura i te CVSS, he anga kaute mōrearea, me te taipitopito atu. Hei tāpiri, ka hono i ngā aromatawai hangarau ki ngā mahi rautaki.cisngā iona, e āhei ai ngā miihini DevSecOps me CIShei tuku i ngā rauemi ki ngā wāhi e tino hiahiatia ana.
Hei tāpiritanga, mā te whakakotahi i te tātaitai CVSS me ētahi atu taputapu ka pai ake te whakawhitiwhiti kōrero a te tīma. Mā tēnei huarahi ka mārama ngā tīma ki ngā tukanga me te whakahaere pai i ngā ngoikoretanga. Mā te whakamahi pai i ngā mōhiohio CVSS, ka whakapakari, ka pupuri hoki ngā whakahaere i tētahi tūnga haumarutanga pono ake.
Kei te hiahia koe ki te ako atu mō te noho ki mua i ngā tūmomo mōrearea i te wā tonu?
Tikiake i tā mātou pepa mā, 'Whakatūpato Moata: Te Kitenga Tūkino me te Whakaritenga Matua i te Wā Tuturu,' ka kitea me pēhea te tiaki i tō mekameka tuku pūmanawa.
Ngā Painga Matua o te CVSS he kaute mōrearea
Ehara i te mea ko te CVSS, he anga whakatau mōrearea, he mea e pā ana ki te tuku tau ki ngā ngoikoretanga anake. Ka tukuna he māramatanga whai tikanga hei āwhina i ngā tīma DevSecOps me CISKa pai ake tā tātou mahicismā te tūhura i ngā mōhiohio e whakaratohia ana e te CVSS me te whakamahi i aua mōhiohio mō ngā rautaki haumarutanga atamai ake.
Ka whakarato i te Aromatawai Mōrearea Pūmau me te Kaute Mōrearea CVSS
Hei tīmatanga, ka whakamahia e CVSS tētahi standardhe tikanga whakatauranga kua whakaritea, kia māmā ake ai te arotake i ngā ngoikoretanga mā ngā tīma. Mā tēnei huarahi ōrite ka whakaitihia te pōhēhētanga, ā, ka āwhina i te katoa o te tīma ki te mahi me te māramatanga ōrite ki ngā mōrearea. Nō reira, ka taea e ngā whakahaere te whakarite i ā rātou mahi me te arotahi ki ngā take tino nui me te kore e moumou taima.
Ka taea te whakapai ake i te DecisTe Hanga-ā-iona
Hei tāpiritanga, e ai ki tā mātou i kōrero ai i mua, ka whakaratohia e te CVSS ngā māramatanga taipitopito mā te wehewehe i ngā ngoikoretanga ki ngā inenga taketake, wā, me te taiao. Ehara i te mea ko te tautuhi noa i te kaha o te riri ēnei māramatanga. E whakaatu ana hoki i te tūponotanga ka whakamahia kinotia te ngoikoretanga. Mā ēnei mōhiohio, ka taea e ngā tīma te tere ake te mahi.cisngā rōpū me te arotahi i ā rātou rauemi ki te aro atu ki ngā mōrearea tino nui.
Whakapai ake i te Whakawhitiwhiti Korero puta noa i nga Kapa
Heoi anō, mā te pūnaha tatau tau CVSS ka māmā ake te whakamārama i ngā ngoikoretanga. Ka taea e ngā tīma haumarutanga te whakamahi i ngā inenga māmā hei āwhina i ngā kaipupuri hea kore-hangarau, pērā i ngā kaiwhakahaere matua, i ngā kaiwhakahaere rānei, kia mārama ki ngā mōrearea. Mā tēnei māramatanga ngātahi ka pai ake te mahi tahi, ka tere ake te mahi tahi.ciste hanga katote, me ngā urupare whai hua ake ki ngā tūmomo riri.
Mahi Pai me ngā Utauta Matatau
Ko tētahi atu painga o CVSS ko tōna hononga pai ki ētahi atu taputapu haumarutanga tukutuku. Hei tauira, ka whakarei ake ngā tūāpapa pēnei i a Xygeni i te CVSS mā te tāpiri i te tātaritanga whakamahinga wā-tūturu me te horopaki wā-oma. Ka āwhina ēnei whakaurunga ki te whakapai ake i te whakatau kaupapa matua, kia māmā ake ai te arotahi a ngā tīma ki ngā ngoikoretanga tino nui.
E hangai ana ki te Ahumahi Standards
Hei whakamutunga, e hangai ana a CVSS ki te ao whānui standards, ā, e whakawhirinakihia ana e ngā whakahaere o te ao katoa. Mā tēnei whakamahinga whānui ka māmā ake te whai a ngā kamupene i ngā tikanga pai o te ahumahi me ngā whakaritenga ture. Nā te mea he whānui te whakamahinga o te CVSS, ka taea e ngā tīma haumarutanga te whakawhirinaki ki a ia hei taputapu pono mō te whakahaere me te whakatau i ngā ngoikoretanga.
Tuhinga o mua CVSS he kaute mōrearea
Ahakoa he taputapu āwhina a CVSS mō te aromatawai i ngā ngoikoretanga, he maha ngā herenga nui me aro atu ngā tīma haumarutanga ki te whakapai ake i tōna whakamahinga.
He Herenga tō te Pikinga Pūmau
Tuatahi, ka whakawhirinaki te CVSS ki te whakatauranga pumau, arā, kāore te kaute o te ngoikoretanga e rerekē ahakoa ka puta mai he tūmomo riri hou. Ka taea e tēnei te mea ka aro nui rawa ngā tīma ki ngā take iti te mōrearea, ka kore rānei e aro ki ngā tūmomo riri e kaha ana, ka mutu ka moumou taima me te kaha.
Kāore he Whakahōutanga mō ngā Tūraru e Huri Ana
Tuarua, kāore a CVSS e urutau ki ngā tūmomo riri e tere ana te huri. Hei tauira, ka nui ake te mōrearea o tētahi ngoikoretanga mēnā ka tukuna e ngā kaipahua he mahi tinihanga tūmatanui, mēnā rānei ka kitea he pūnaha nui. Ki te kore he whakahōutanga wā-tūturu, ka ngaro pea i ngā tīma ngā tūmomo riri e hiahiatia ana.
Ngā Raraunga Whakamahinga Ngaro
Hei tāpiritanga, ka ine te CVSS i te kaha o te ngoikoretanga engari kāore e whakaatu i te tūponotanga ka whakamahia kinotia. Ka taea e ngā taputapu pēnei i te EPSS te āwhina mā te matapae i ngā tūponotanga whakamahi kino. Hei tauira, kāore pea he mahi tere e hiahiatia ana mō te kaute CVSS teitei mena he iti te āheinga whakamahi kino, engari me aro tonu ki te kaute taurite me te āheinga whakamahi kino teitei.
Whakaritenga Taiao Iti
Hei whakamutunga, ahakoa ka whakaaetia e te CVSS ētahi whakarerekētanga i runga i te whakatakotoranga o tētahi whakahaere, he maha ngā wā ka pekehia, ka whakamahia hētia rānei ēnei whakarerekētanga. Ka arahi pea tēnei ki ngā kaute kāore e whakaata katoa i ngā mōrearea, pērā i ngā mea kei roto i ngā pūnaha e anga atu ana ki te marea e kitea nuitia ana i ngā taputapu ā-roto.
He raruraru tipu haere te pikinga o ngā utu
Ehara tēnei herenga i te ariā noa iho. I te tau 2025, 8.3% o ngā CVE katoa i whiwhi tohu Hiranga ā, 31.1% i whiwhi i te tohu "Teitei" me te "Hiranga" rānei, ina tata ki te 40% o ngā ngoikoretanga katoa kua whakaputaina, ka mutu te wehewehe i te mōrearea tūturu mai i te mōrearea noa, koinei tonu te take kāore e taea e te CVSS anake te akiaki i te whakatau kaupapa matua.
Mā te tāpiri i ngā taputapu pēnei i EPSS me te aroturukitanga wā-tūturu, ka taea e ngā tīma te whakatika i ēnei āputa me te arotahi pai ake ki ngā ngoikoretanga tino nui.
Te wikitoria i ngā herenga me ngā huarahi tautoko
Hei whakatika i ēnei herenga, me whakakotahi ngā whakahaere i te CVSS me ētahi atu taputapu me ngā inenga e tāpiri ana i te horopaki hihiri me ngā māramatanga whakamahi-tikanga. Hei tauira:
- Whakaurunga EPSSWhakapai ake i te CVSS me te EPSS hei whakauru i te tūponotanga o te whakamahi kino, me te whakarite kia aro nui ki ngā ngoikoretanga e whakaatu ana i tētahi tūmomo mōrearea tūturu.
- Tātaritanga TaengaWhakamahia ngā taputapu hei whakatau mēnā kei te wātea he ngoikoretanga i roto i tō taiao, me te whakaiti i te arotahi ki ngā mōrearea kāore e taea te whakatutuki.
- Horopaki Wā WhakahaereWhakamahia te aroturukitanga wā-tūturu hei aromatawai mēnā kei te whakamahia kaha, kei te pāngia rānei ngā ngoikoretanga e ngā pūnaha ora.
- Whakaurunga KEV: Ngā ngoikoretanga whakawhiti-tohutoro ki CISKo te rārangi o ngā ngoikoretanga kua whakamahia e A. E 884 ngā ngoikoretanga i tāpirihia ki te KEV i te tau 2025, ā, 28.96% o ēnei kua whakamahia kētia i te rā i whakapuakina ai ki te marea, i mua atu rānei. Kāore i rite ki te tūponotanga matapae a te EPSS, e whakaū ana a KEV kua kitea te whakamahinga, ā, koinei tētahi o ngā tohu kaha kore-aroaro e wātea ana hei whakatau i ngā mea matua.
Mā te whakatika i ēnei herenga me te whakauru i te CVSS me ngā taputapu tāpiri, ka taea e ngā tīma haumarutanga te hanga i ngā mahi whai mōhiotanga ake.cisngā iona, me te whakarite kei te arotahi ā rātou mahi ki ngā ngoikoretanga tino nui.
CVSS me te Ture Manawanui Ipurangi a te EU (CRA)
He mea nui ake te whakatauranga CVSS i te mea he mea nui ake i te whakatau kaupapa ā-roto. Ture Manawanui Ipurangi a te EU (Ture (EU)) 2024/2847) e hiahia ana kia tirotirohia e ngā kaihanga ngā ngoikoretanga, kia whakatikahia i te wā tika, ā, kia ripoatahia te whakamahinga hohe ina mōhio rātou. E rua ngā rā e whai tikanga ana i konei: ko te herenga ripoata mō ngā ngoikoretanga e whakamahia ana (Tuhinga 14) ka pā mai i te 11 o Hepetema, 2026, ko te herenga whānui mō te whakahaere ngoikoretanga, te whakatikatika, me te whakaatu (Tuhinga 13 me te Tāpiritanga I) ka pā mai i te 11 o Tīhema, 2027.
Kotahi te whakamārama nui: kāore te CRA e whakahau ana i te CVSS, te EPSS, te KEV, tētahi atu pūnaha whakatauranga motuhake rānei. Me whakatika wawe engari ka waiho te ine mahi ki ia kaihanga. Heoi anō, kāore te kaute CVSS, EPSS rānei anake e tīmata i te karaka pūrongo 24-hāora, engari ko te whakatau pono kei te whakamahia kaha te ngoikoretanga ki tētahi ūnga tūturu. I roto i te mahi, ko te tikanga o tēnei me whai tukanga whakatauranga me te kimi kua tuhia, rite tonu, e taea ai te wehewehe pono i te "tino kino" mai i te "whakamahi kaha", ko te āputa tonu e waiho ana e te CVSS anake.
Mena kei te hoko koe i ngā pūmanawa, i ngā taputapu rānei me ngā huānga matihiko i roto i te EU, koinei te wā tika ki te hanga (ki te arotake rānei) i tō kaute CVSS + EPSS + KEV. pipeline, i mua noa atu i te taenga mai o te rā kati o Hepetema 2026.
Me pēhea te whakapai ake a Xygeni i te CVSS he Anga Kaute Mōrearea
Ahakoa he anga whakatau mōrearea a CVSS, he tīmatanga pai mō te aromatawai i ngā ngoikoretanga, ka pai ake te mahi a Xygeni mā te tāpiri i ngā māramatanga atamai, te whakatau kaupapa matua pai ake, me te aunoatanga. Ka āwhina ēnei taputapu i ngā tīma haumarutanga ki te arotahi ki ngā tūmomo riri nui rawa atu, me te whakaiti i ngā whakatūpato kore e tika ana e puta ai te ngenge. Ka taea hoki e ngā tīma te whakamahi i ngā mōhiohio e whakaratohia ana e CVSS hei tere ake, hei whai mōhiotanga hoki.cisngota.
Ka whakakotahi a Xygeni i te CVSS me ngā raraunga o te ao tūturu, pērā i te tūponotanga o te whakamahi i ngā ngoikoretanga me ngā mea e tupu ana i te wā tūturu. Mā tēnei huarahi ka māmā ake te whakarite i ngā kaupapa matua me te tere o te urupare ki ngā tūmomo riri tūturu.
- Tātaritanga TaengaMā Xygeni ka tautuhia mēnā kei te kaha te whakamahi i tētahi ngoikoretanga i roto i tō taiao. Mā tēnei ka arotahi ngā mahi haumarutanga ki ngā tūmomo riri e pā ana ki a ia.
- Whakaurunga EPSS me CVSSMā te whakakotahi i ngā raraunga whakamahi me ngā māramatanga CVSS, ka taea e Xygeni te whakahaere atamai akecisngā iona. Hei tauira, e ai ki te whakamārama i roto i Te rangitaki Wehewehenga Kaute CVE a Xygeni, mā tēnei whakaurunga ka tika ake te whakarite i ngā kaupapa matua.
- Tauhokohoko Puku Pakihi: Ka tohu a Xygeni i ngā ngoikoretanga e pā ana ki ngā rawa nui hei whakataurite i ngā kaupapa matua o te haumarutanga ki ngā whāinga pakihi. Nō reira, ka taea e ngā tīma te arotahi i ngā mahi whakatikatika ki ngā mea tino nui ki te whakahaere.
- Ngā Tirohanga Wā Whakahaere: Ka tāpirihia e Xygeni ngā horopaki wā-tūturu, pērā i ngā mahi whakamahi hohe, ka māmā ake te mahi i ngā kaupapa matua, ā, ka tere ake te whakaritecise.
- Whakatikatika AunoaKa whakatika aunoa a Xygeni i ngā ngoikoretanga ina kitea tonutia. Ka whakaitihia e tēnei tukanga te mahi ā-ringa, ka tere ake ngā urupare, ā, ka taea e ngā kaiwhakawhanake te arotahi ki ā rātou mahi waehere me te kore e whakararuraru.
Ka whakakotahi a Xygeni i te CVSS me ngā taputapu pēnei i te EPSS, ā, ka whakamahia te aunoatanga hei whakahaere i ngā ngoikoretanga. Nō reira, ka āwhina tēnei huarahi mārama, arotahi hoki i ngā kaihangarau DevSecOps me CISKa arotahi ngā kaimahi ki ngā mahi nui, ka whakaiti i ngā mōrearea, ka whakapakari hoki i te haumarutanga.
Hei tāpiri atu ki tēnā, ka whakarei ake a Xygeni i te whakawhitiwhiti kōrero a te tīma mā te tuku i ngā rerengamahi mārama me ngā māramatanga mahi. Mā ēnei āhuatanga ka āwhina ngā whakahaere ki te hanga pūnaha haumarutanga kaha ake, me te noho whakamua i ngā tūmomo riri hou.
I te mea e tata mai ana ngā herenga pūrongo a te EU Cyber Resilience Act i te marama o Hepetema 2026, ehara i te mea he mahi pai noa iho te whai i tētahi tukanga whakatau kaupapa matua e ahu mai ana i te CVSS me te EPSS kua tuhia, kua aunoatia, engari kua noho hei mea nui mō te tutuki i ngā whakaritenga. Mā te huarahi a Xygeni ki te whakakotahi i te CVSS me te EPSS me te horopaki taea te toro atu ka āwhina i ngā tīma ki te hanga i taua momo tukanga e taea ai te tiaki, e rite ana ki te arotake i mua i te rā kati.
Whakahaerehia tō Whakahaerenga Whakaraerae i Tēnei Rā
Kaua e tukua ngā ngoikoretanga kia whakaroa i a koe, kia tūpono rānei ō pūnaha ki te mōrearea. Engari, whakamahia ngā taputapu matatau a Xygeni hei whakarerekē i te āhua o tō whakahaere me te whakatau i ngā tūmomo riri. Mā te whakakotahi i te mana o te CVSS me ngā māramatanga hihiri pēnei i te ngāwari ki te whakamahi me te taea te toro atu, ka taea e Xygeni te arotahi ki ngā mea tino nui.
Kua rite koe ki te mahi i te taahiraa e whai ake nei? Tūhurahia ngā otinga whakahaere ngoikoretanga a Xygeni, tirohia me pēhea mātou e āwhina ai i a koe kia noho matatau ki ngā tūmomo riri e whanake haere ana. Tonoa he demo i tenei ra ki te wheako i te heke mai o te haumarutanga tukutuku.
FAQs
He aha te rerekētanga i waenga i te CVSS v3.1 me te CVSS v4.0?
Ka whakauruhia e te CVSS v4.0 he whakaingoatanga hou hei wehewehe i ngā kaute Base (CVSS-B), Base+Threat (CVSS-BT), Base+Environmental (CVSS-BE), me Base+Threat+Environmental (CVSS-BTE), ka whakakapia te rōpū inenga Temporal tawhito ki tētahi rōpū Threat mahi ake, ā, ka tāpirihia he Rōpū Inenga Tāpiri kōwhiringa mō ngā horopaki o waho pērā i te pānga haumaru me te aunoatanga. Kua hangaia hei whakaiti i te koretake i kore ai e whakamahia ngā inenga Temporal a CVSS v3.1 i roto i te mahi.
Me tatau anō e au taku rarangi ngoikore o nāianei i raro i te CVSS v4.0?
Kāo. Kāore i te whakamaheretia te whakahou i te kaute o te pātengi raraunga NVD katoa i raro i te CVSS v4.0, ā, ka mau tonu ngā kaute CVSS v3.1 o mua hei tohutoro matua. Me tīmata ngā tīma haumarutanga ki te whakamahi i ngā kaute CVSS v4.0 mō ngā CVE hou kua whakaputaina i ngā rā kei mua, me te kore e whakahou i ngā whakataunga matua o mua.cisngota.
He aha i maha ai ngā CVE e whiwhi ana i te "Hiranga" me te "Teitei"?
I te tau 2025, 8.3% o ngā CVE i whiwhi i te tohu Tino Hira, ā, 31.1% i whiwhi i te tohu Teitei, ko te tikanga tata ki te 40% o ngā ngoikoretanga katoa i whakaaturia he tohu tino kino. Ko tēnei "whakapikinga kino" he tohu i mua.cisAhakoa te kore e ranea te CVSS anake hei taputapu whakatau kaupapa matua, kāore e taea te wehewehe i tētahi hapa nui engari kāore e taea te whakatutuki mai i tētahi e whakamahia nuitia ana.
He aha te KEV, ā, he aha tōna rerekētanga mai i te EPSS?
KEV (Ngā Whakaraeraetanga Kua Mōhiotia), e tiakina ana e CISA, e whakarārangi ana i ngā ngoikoretanga me ngā taunakitanga kua whakaūtia mō te whakamahinga hohe i te ngahere. He rerekē, ko te EPSS he tauira tūponotanga e whakatau ana i te tūponotanga ka whakamahia he ngoikoretanga i roto i ngā rā 30 e whai ake nei. E 884 ngā ngoikoretanga i tāpirihia ki te KEV i te tau 2025, me te tata ki te 29% kei raro kē i te whakamahinga hohe i mua i te whakaaturanga ki te marea. Mā te whakamahi tahi i te KEV me te EPSS ka puta he tohu mōrearea kua whakaūtia me te tohu mō te heke mai.
He rawaka noa iho te CVSS hei whakarite i te whakarōpūtanga o ngā ngoikoretanga?
Kāo. E whakaatu tonu ana ngā rangahau ā-pūtaiao ko te nuinga o ngā ngoikoretanga i tohua he "teitei" he "tino nui" rānei e te CVSS kāore i te kitea kua whakamahia kinotia. Ko te huarahi CVSS anake ka pau te wā hangarau i runga i te mōrearea ariā, engari ko ngā ngoikoretanga pono kua whakamahia kinotia, tērā pea kāore e arohia. Ko te whakakotahi i te CVSS me te EPSS, KEV, me te tātari taea te toro atu te huarahi e taunakihia ana e te umanga i tēnei wā.
