Scoring & Prioritization
Asset Exposure →
How DefectDojo Pro records whether an asset is reachable from outside, whether a Finding is deployed in production, and how both adjust priority
CVSS Version Support →
Which CVSS versions DefectDojo stores, displays, and accepts on Findings
EPSS / KEV →
How DefectDojo Pro enriches Findings with EPSS and CISA KEV data, when it syncs, and how it drives priority
Reachability →
How DefectDojo Pro records whether a Finding's vulnerable code is actually reachable, and how that verdict adjusts priority