<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Scoring &amp; Prioritization on DefectDojo Documentation</title><link>https://docs.defectdojo.com/triage_findings/finding_scoring/</link><description>Recent content in Scoring &amp; Prioritization on DefectDojo Documentation</description><generator>Hugo</generator><language>en-US</language><copyright>Copyright (c) 2020-2025 DefectDojo, Inc.</copyright><lastBuildDate>Mon, 01 Jan 0001 00:00:00 +0000</lastBuildDate><atom:link href="https://docs.defectdojo.com/triage_findings/finding_scoring/index.xml" rel="self" type="application/rss+xml"/><item><title>CVSS Version Support</title><link>https://docs.defectdojo.com/triage_findings/finding_scoring/cvss_support/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.defectdojo.com/triage_findings/finding_scoring/cvss_support/</guid><description>&lt;p&gt;DefectDojo supports CVSS metadata on Findings, including the CVSS 4.0 standard. This page describes which CVSS versions are stored end-to-end, where you can enter or view them, and what to expect from parser-side coverage.&lt;/p&gt;</description></item><item><title>EPSS / KEV</title><link>https://docs.defectdojo.com/triage_findings/finding_scoring/epss_kev/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://docs.defectdojo.com/triage_findings/finding_scoring/epss_kev/</guid><description>&lt;p&gt;DefectDojo Pro automatically enriches your Findings with two external threat-intelligence sources — &lt;strong&gt;EPSS&lt;/strong&gt; and &lt;strong&gt;CISA KEV&lt;/strong&gt; — so that prioritization reflects how likely a vulnerability is to be exploited, not just its CVSS severity. Both sources match to Findings by &lt;strong&gt;CVE&lt;/strong&gt;, refresh on a &lt;strong&gt;daily schedule&lt;/strong&gt;, and feed directly into each Finding&amp;rsquo;s computed &lt;strong&gt;priority&lt;/strong&gt; score.&lt;/p&gt;</description></item></channel></rss>