A security team conducts a vulnerability scan and receives findings across 1,000 hosts. They want to prioritize remediation using the CVSS base score combined with threat intelligence. Which CVSS 3.1 metric most influences exploitability?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Attack Vector (AV) is a critical exploitability metric; a Network (N) AV score means the vulnerability is exploitable over the internet without physical or network adjacency requirements, dramatically increasing the attacker pool and risk. A is wrong because Scope affects the potential impact breadth but is an impact factor, not the primary exploitability factor.
Full explanation below image
Full Explanation
B is correct because Attack Vector (AV) is a critical exploitability metric; a Network (N) AV score means the vulnerability is exploitable over the internet without physical or network adjacency requirements, dramatically increasing the attacker pool and risk. A is wrong because Scope affects the potential impact breadth but is an impact factor, not the primary exploitability factor. C is wrong because Integrity Impact describes potential consequences but is an impact metric, not an exploitability metric. D is wrong because Privileges Required is one of several exploitability metrics but alone does not determine overall exploitability; AV, AC, UI, and PR all contribute.