Which CVSS metric set does Exploitability belong to according to the material?

Which CVSS metric set does Exploitability belong to according to the material?

• A. Base Metric
• B. Temporal Metric
• C. Environmental Metric
• D. All Metrics

Answer: (B)

In this material, metrics are grouped into three sets: Base, Temporal, and Environmental. Exploitability is placed in the Temporal Metrics because it captures how the ease of exploiting a vulnerability can change over time. Factors like the availability of exploit code, the maturity of exploits, and how easily an attacker can succeed aren’t fixed; they evolve as the situation changes. That time-dependent nature is why Exploitability is categorized with the Temporal Metrics rather than the Base Metrics (which describe inherent, static properties of the vulnerability) or the Environmental Metrics (which tailor the score to a specific environment).

In this material, metrics are grouped into three sets: Base, Temporal, and Environmental. Exploitability is placed in the Temporal Metrics because it captures how the ease of exploiting a vulnerability can change over time. Factors like the availability of exploit code, the maturity of exploits, and how easily an attacker can succeed aren’t fixed; they evolve as the situation changes. That time-dependent nature is why Exploitability is categorized with the Temporal Metrics rather than the Base Metrics (which describe inherent, static properties of the vulnerability) or the Environmental Metrics (which tailor the score to a specific environment).