Scoring & Prioritization
CVSS Version Support →
Which CVSS versions DefectDojo stores, displays, and accepts on Findings
EPSS / KEV →
How DefectDojo Pro enriches Findings with EPSS and CISA KEV data, when it syncs, and how it drives priority
Reachability →
How DefectDojo Pro records whether a Finding's vulnerable code is actually reachable, and how that verdict adjusts priority