Hi, I think that we should not be mixing the vulnerability and risk together. Vulnerability is the weakness of a design or system to be exploited. The risk is loss in case it happens...
Therefore, CVE is all refering to Vulnerability. If you put up a MSQL Server in a standalone machine without any LAN connection. Is this a risk ? __________________________________________________ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com
