HOW TO DO VULNERABILITY PRIORITIZATION

Summary from the TLDR InfoSec newsletter

This post provides an overview of Opus Security's vulnerability prioritization process. The strategy begins by utilizing the base CVSS score and then enriches it with additional information about the vulnerability such as the availability of exploit code, whether there are known attackers who are exploiting the vulnerability, and whether a patch is available. The next level involves adding in environmental factors such as how the resource is configured and its exposure.