We would like to use CVSSv2 scores in our results reporting. I was wondering if anyone is working on doing CVSS scoring on plugins that are currently without CVSS scores? Is there any kind of schedule or estimate on when that will be done? Would it be useful to partner on creating scores for the plugins that do not currently have them? We strongly prefer to use CVSS v2 scores over the normal Nessus Low/Medium/High scoring. Also, there are a large number of plugins that do not have CVEs associated with them. Has anyone done any research as to whether this is due plugin writers not providing them, or do these plugins truly not have CVEs to be associated with? Is anyone working on improving this?
Bill _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
