The Common Vulnerability Scoring System score is the de facto standard to assess risk of software vulnerabilities, with three temporal components: exploitability, remediation level, and report confidence. We discuss how the latter may be inferred from the first two, pointing practical and conceptual issues in the usage of temporal risk scores.

中文翻译：

---

漏洞报告置信度是多余的吗？使用时间风险评分的陷阱

通用漏洞评分系统分数是评估软件漏洞风险的事实标准，具有三个时间组成部分：可利用性、修复级别和报告可信度。我们讨论了如何从前两个中推断出后者，指出了时间风险评分使用中的实际和概念问题。