Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Vulnerability Management Isn't About the Score — It's About How It Applies to You
Summary + source link. No paywalls, no tracking.