Zoom joins the vulnerability fray: Will VISS move the needle on AppSec?

Zoom introduced the Vulnerability Impact Scoring System (VISS), a free, customizable framework that scores vulnerability impact (0–100) based on 13 defender-focused metrics and only on demonstrated exploitation, complementing rather than replacing CVSS. The article contrasts VISS with EPSS (which predicts exploitation likelihood) and highlights expert perspectives on how combining VISS, EPSS, and CVSS can improve prioritization amid resource constraints, while emphasizing that vulnerability management should be part of a broader security strategy.