Which CVSS metric is most likely to change over time due to exploit availability or remediation?

Which CVSS metric is most likely to change over time due to exploit availability or remediation?

• A. Remediation
• B. Base Metric
• C. Temporal Metric
• D. Environmental Metric

Answer: (C)

Exploit availability and remediation are time-dependent factors that CVSS tracks in its Temporal metrics. This set measures how risk changes as new information emerges: Exploit Code Maturity reflects whether and how readily an exploit exists or is weaponized; Remediation Level captures the current status of fixes or mitigations; and Report Confidence updates as more evidence about the vulnerability becomes available. The Base metrics describe the inherent characteristics of the vulnerability, such as impact and exploitability, which don’t typically change as exploits appear or patches are released. Environmental metrics are about a specific environment and can change with context, not because exploits or patches themselves evolve. So, as exploits appear and remediation progresses, the score shifts through the Temporal metrics, making it the factor most likely to change over time.

Exploit availability and remediation are time-dependent factors that CVSS tracks in its Temporal metrics. This set measures how risk changes as new information emerges: Exploit Code Maturity reflects whether and how readily an exploit exists or is weaponized; Remediation Level captures the current status of fixes or mitigations; and Report Confidence updates as more evidence about the vulnerability becomes available. The Base metrics describe the inherent characteristics of the vulnerability, such as impact and exploitability, which don’t typically change as exploits appear or patches are released. Environmental metrics are about a specific environment and can change with context, not because exploits or patches themselves evolve. So, as exploits appear and remediation progresses, the score shifts through the Temporal metrics, making it the factor most likely to change over time.