Our cybersecurity glossary explains vulnerability management terms in plain English: CVE, CVSS, false positives and the scanning, malware and attack surface concepts behind them. Every definition is written by practitioners and links to the related guide or free tool.
Browse security terms A to Z, from scoring systems such as CVSS to scanning methods and exposure management.
o
Information Security Manager · CISSP · CEH · OSCP
A CVSS score is a number from 0.0 to 10.0 that rates how severe a security vulnerability is. CVSS, the Common Vulnerability Scoring System, gives every flaw a consistent severity
A false positive is a finding that a vulnerability scanner reports as a security flaw when no real, exploitable flaw exists. The scanner cries wolf: it flags something that looks
A CVE, short for Common Vulnerabilities and Exposures, is a unique public identifier assigned to one specific, disclosed security flaw in software or hardware. Each record gives a single vulnerability
A CVSS score is a number from 0.0 to 10.0 that rates how severe a security vulnerability is. CVSS, the Common Vulnerability Scoring System, gives every flaw a consistent severity
A CVE, short for Common Vulnerabilities and Exposures, is a unique public identifier assigned to one specific, disclosed security flaw in software or hardware. Each record gives a single vulnerability
A false positive is a finding that a vulnerability scanner reports as a security flaw when no real, exploitable flaw exists. The scanner cries wolf: it flags something that looks
o
12+ years in information security. Specialises in web application security, vulnerability management, and external attack surface reduction for SMB and mid-market organisations.
Editorial standards: All ScanTitan blog content is reviewed by certified InfoSec professionals before publication. Technical claims are tested against live scan results or cited from primary sources (CVE database, OWASP, NIST NVD). We do not accept sponsored posts or paid placements.
