CVSS is a standardized framework published by FIRST (Forum of Incident Response and Security Teams) for rating the severity of security vulnerabilities. It provides a numerical score (0–10) based on technical characteristics, enabling consistent vulnerability comparison and prioritization. Job relevance: Security analysts, vulnerability managers, risk officers, and security architects need CVSS expertise for vulnerability management and compliance (PCI DSS, etc.).