Infosec pros: We need CVSS, warts and all

This article reviews debates over the Common Vulnerability Scoring System (CVSS), describing how NVD resource constraints and scoring practices have fueled criticism, while experts argue CVSS remains a useful, widely adopted baseline; it also surveys limitations of CVSS, complementary efforts such as EPSS for exploitation likelihood, and alternative frameworks (e.g., NCSC forgivability concepts), concluding that CVSS should continue as a cornerstone of vulnerability reporting when used alongside other tools.