{"id":8680,"date":"2025-06-10T17:23:53","date_gmt":"2025-06-10T08:23:53","guid":{"rendered":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8680"},"modified":"2025-06-10T17:23:54","modified_gmt":"2025-06-10T08:23:54","slug":"cve-cwe-kev-cvss-epss-%ec%84%a4%eb%aa%85","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8680","title":{"rendered":"CVE, CWE, KEV, CVSS, EPSS \uc124\uba85"},"content":{"rendered":"\n

 <\/p>\n

\ud83d\udccc 1. CVE (Common Vulnerabilities and Exposures)<\/strong><\/span><\/h3>\n
    \n
  • \n

    \ubaa9\uc801:<\/strong> \uac1c\ubcc4 \ubcf4\uc548 \ucde8\uc57d\uc810\uc5d0 \uace0\uc720 \uc2dd\ubcc4\uc790(ID)\ub97c \ubd80\uc5ec\ud574 \uc2dd\ubcc4 \uac00\ub2a5\ud558\uac8c \ud568<\/span><\/p>\n<\/li>\n

  • \n

    \ud615\uc2dd:<\/strong> CVE-2024-12345<\/code><\/span><\/p>\n<\/li>\n

  • \n

    \ub0b4\uc6a9:<\/strong> \uc81c\ud488, \ucde8\uc57d\uc810 \uc124\uba85, \uc601\ud5a5 \ubc94\uc704 \ub4f1 \uac04\ub7b5 \uc815\ubcf4<\/span><\/p>\n<\/li>\n

  • \n

    \uc6b4\uc601 \uc8fc\uccb4:<\/strong> MITRE Corporation (\ubbf8\uad6d \uc815\ubd80 \ud6c4\uc6d0)<\/span><\/p>\n<\/li>\n

  • \n

    \uc0ac\uc6a9 \uc608:<\/strong> \ubcf4\uc548 \ud328\uce58\ub098 \ub9ac\uc2a4\ud06c \uad00\ub9ac \ub3c4\uad6c\uc5d0\uc11c \ucde8\uc57d\uc810\uc744 \uc9c0\uce6d\ud560 \ub54c \uc0ac\uc6a9<\/span><\/p>\n<\/li>\n<\/ul>\n

    \n

    \ud83d\udccc 2. CWE (Common Weakness Enumeration)<\/strong><\/span><\/h3>\n
      \n
    • \n

      \ubaa9\uc801:<\/strong> \ubcf4\uc548 \ucde8\uc57d\uc810\uc758 \uadfc\ubcf8 \uc6d0\uc778 \ub610\ub294 \uc720\ud615<\/strong>\uc744 \ubd84\ub958<\/span><\/p>\n<\/li>\n

    • \n

      \ud615\uc2dd:<\/strong> CWE-79<\/code> (\uc608: \ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305)<\/span><\/p>\n<\/li>\n

    • \n

      \ub0b4\uc6a9:<\/strong> \ucde8\uc57d\uc810\uc774 \ubc1c\uc0dd\ud558\ub294 \ucf54\ub4dc \uc124\uacc4\ub098 \uad6c\ud604\uc0c1\uc758 \ud328\ud134<\/span><\/p>\n<\/li>\n

    • \n

      \uc6b4\uc601 \uc8fc\uccb4:<\/strong> MITRE<\/span><\/p>\n<\/li>\n

    • \n

      \uc0ac\uc6a9 \uc608:<\/strong> \ubcf4\uc548 \ub3c4\uad6c\ub098 \ucf54\ub4dc \ub9ac\ubdf0 \uc2dc \ucde8\uc57d\uc810\uc758 \ud328\ud134 \ubd84\uc11d<\/span><\/p>\n<\/li>\n<\/ul>\n

      \n

      \ud83d\udccc 3. KEV (Known Exploited Vulnerabilities Catalog)<\/strong><\/span><\/h3>\n
        \n
      • \n

        \ubaa9\uc801:<\/strong> \uc2e4\uc81c\ub85c \uacf5\uaca9\uc5d0 \uc0ac\uc6a9\ub41c CVE \ubaa9\ub85d<\/strong>\uc744 \uad00\ub9ac<\/span><\/p>\n<\/li>\n

      • \n

        \ud2b9\uc9d5:<\/strong> \ubbf8\uad6d CISA\uac00 \uad00\ub9ac, \uc2e4\uc9c8\uc801 \uacf5\uaca9 \uc704\ud611\uc774 \ub192\uc740 \ucde8\uc57d\uc810\ub9cc \ud3ec\ud568<\/span><\/p>\n<\/li>\n

      • \n

        \ub0b4\uc6a9:<\/strong> \ud574\ub2f9 \ucde8\uc57d\uc810\uc774 \uc545\uc6a9\ub418\uc5c8\uc74c\uc744 \ud655\uc778\ud55c \uacf5\uc2dd \ubaa9\ub85d<\/span><\/p>\n<\/li>\n

      • \n

        \uc0ac\uc6a9 \uc608:<\/strong> \uc815\ubd80 \uae30\uad00 \ubc0f \uae30\uc5c5 \ubcf4\uc548\ud300\uc758 \ud328\uce58 \uc6b0\uc120\uc21c\uc704 \uacb0\uc815<\/span><\/p>\n<\/li>\n<\/ul>\n

        \n

        \ud83d\udccc 4. CVSS (Common Vulnerability Scoring System)<\/strong><\/span><\/h3>\n
          \n
        • \n

          \ubaa9\uc801:<\/strong> CVE\uc5d0 \ub300\ud55c \uc815\ub7c9\uc801 \uc2ec\uac01\ub3c4 \uc810\uc218<\/strong> \uc81c\uacf5 (0.0~10.0)<\/span><\/p>\n<\/li>\n

        • \n

          \ubc84\uc804:<\/strong> v3.1\uc774 \uac00\uc7a5 \ub9ce\uc774 \uc0ac\uc6a9\ub428<\/span><\/p>\n<\/li>\n

        • \n

          \uce21\uc815 \uae30\uc900:<\/strong><\/span><\/p>\n

            \n
          • \n

            Base Score (\uae30\ubcf8 \uc704\ud5d8\ub3c4)<\/span><\/p>\n<\/li>\n

          • \n

            Temporal Score (\uc2dc\uac04 \ubcc0\ud654 \uc694\uc778)<\/span><\/p>\n<\/li>\n

          • \n

            Environmental Score (\ud658\uacbd\ubcc4 \uc601\ud5a5)<\/span><\/p>\n<\/li>\n<\/ul>\n<\/li>\n

          • \n

            \uc6b4\uc601 \uc8fc\uccb4:<\/strong> FIRST.org<\/span><\/p>\n<\/li>\n

          • \n

            \uc0ac\uc6a9 \uc608:<\/strong> \ucde8\uc57d\uc810 \uc2ec\uac01\ub3c4 \ubd84\ub958 \ubc0f \ud328\uce58 \uc6b0\uc120\uc21c\uc704 \uacb0\uc815<\/span><\/p>\n<\/li>\n<\/ul>\n

            \n

            \ud83d\udccc 5. EPSS (Exploit Prediction Scoring System)<\/strong><\/span><\/h3>\n
              \n
            • \n

              \ubaa9\uc801:<\/strong> CVE\uac00 \ud5a5\ud6c4 \uc545\uc6a9\ub420 \uac00\ub2a5\uc131<\/strong>\uc744 \ud655\ub960\ub85c \uc608\uce21<\/span><\/p>\n<\/li>\n

            • \n

              \ud615\uc2dd:<\/strong> \ud655\ub960 \uac12 (0 ~ 1), \uc608: EPSS = 0.82<\/code> → 82% \uc545\uc6a9 \ud655\ub960<\/span><\/p>\n<\/li>\n

            • \n

              \uc6b4\uc601 \uc8fc\uccb4:<\/strong> FIRST.org<\/span><\/p>\n<\/li>\n

            • \n

              \uae30\ubc18:<\/strong> \uba38\uc2e0\ub7ec\ub2dd \ubaa8\ub378 + \uacfc\uac70 \uc545\uc6a9 \ub370\uc774\ud130<\/span><\/p>\n<\/li>\n

            • \n

              \uc0ac\uc6a9 \uc608:<\/strong> \ud328\uce58 \uc6b0\uc120\uc21c\uc704 \uacb0\uc815 (KEV\uc5d0 \ud3ec\ud568\ub418\uc9c0 \uc54a\uc558\ub354\ub77c\ub3c4 \uc704\ud5d8 \ub192\uc740 \uac83 \uc120\ubcc4)<\/span><\/p>\n<\/li>\n<\/ul>\n

              \n

              \u2705 \uc694\uc57d \ube44\uad50 \ud45c<\/span><\/h3>\n
              \n
              \n\n\n\n\n\n\n\n\n
              \uc694\uc18c<\/span><\/th>\nCVE<\/span><\/th>\nCWE<\/span><\/th>\nKEV<\/span><\/th>\nCVSS<\/span><\/th>\nEPSS<\/span><\/th>\n<\/tr>\n<\/thead>\n
              \ucd08\uc810<\/strong><\/span><\/td>\n\uac1c\ubcc4 \ucde8\uc57d\uc810 \uc2dd\ubcc4<\/span><\/td>\n\ucde8\uc57d\uc810\uc758 \uc720\ud615 \ub610\ub294 \uc6d0\uc778<\/span><\/td>\n\uc2e4\uc81c \uc545\uc6a9\ub41c \ucde8\uc57d\uc810 \ubaa9\ub85d<\/span><\/td>\n\ucde8\uc57d\uc810\uc758 \uc2ec\uac01\ub3c4 \ud3c9\uac00<\/span><\/td>\n\uc545\uc6a9 \uac00\ub2a5\uc131 \uc608\uce21<\/span><\/td>\n<\/tr>\n
              \ud615\uc2dd<\/strong><\/span><\/td>\nCVE-YYYY-NNNNN<\/span><\/td>\nCWE-###<\/span><\/td>\nCVE \ubaa9\ub85d<\/span><\/td>\n0.0 ~ 10.0 \uc810\uc218<\/span><\/td>\n0.0 ~ 1.0 \ud655\ub960<\/span><\/td>\n<\/tr>\n
              \uc6b4\uc601<\/strong><\/span><\/td>\nMITRE<\/span><\/td>\nMITRE<\/span><\/td>\nCISA (\ubbf8\uad6d \uc815\ubd80)<\/span><\/td>\nFIRST.org<\/span><\/td>\nFIRST.org<\/span><\/td>\n<\/tr>\n
              \ud65c\uc6a9 \uc608<\/strong><\/span><\/td>\n\uc2dd\ubcc4 \ubc0f \ucd94\uc801<\/span><\/td>\n\ubcf4\uc548 \ubd84\uc11d\/\uad50\uc721<\/span><\/td>\n\ud328\uce58 \uc6b0\uc120\uc21c\uc704 \uc124\uc815<\/span><\/td>\n\uc704\ud5d8\ub3c4 \ud3c9\uac00<\/span><\/td>\n\uc545\uc6a9 \uac00\ub2a5\uc131 \uae30\ubc18 \ub300\uc751 \uc6b0\uc120\uc21c\uc704<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
              \n
               <\/div>\n<\/div>\n<\/div>\n<\/div>\n
              \n

              \ud83e\udde0 \uc815\ub9ac<\/span><\/h3>\n
                \n
              • \n

                CVE<\/strong>: \"\ubb34\uc5c7\uc774 \ucde8\uc57d\ud55c\uac00?\"\ub97c \uc815\uc758<\/span><\/p>\n<\/li>\n

              • \n

                CWE<\/strong>: \"\uc65c \uadf8 \ucde8\uc57d\uc810\uc774 \uc0dd\uacbc\ub294\uac00?\"\ub97c \ubd84\uc11d<\/span><\/p>\n<\/li>\n

              • \n

                CVSS<\/strong>: \"\uc5bc\ub9c8\ub098 \uc2ec\uac01\ud55c\uac00?\"\ub97c \uc810\uc218\ud654<\/span><\/p>\n<\/li>\n

              • \n

                EPSS<\/strong>: \"\uacf5\uaca9 \uac00\ub2a5\uc131\uc774 \uc5bc\ub9c8\ub098 \ub192\uc740\uac00?\"\ub97c \uc608\uce21<\/span><\/p>\n<\/li>\n

              • \n

                KEV<\/strong>: \"\uc2e4\uc81c\ub85c \uc545\uc6a9\ub410\ub294\uac00?\"\ub97c \ud655\uc778<\/span><\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                  \ud83d\udccc 1. CVE (Common Vulnerabilities and Exposures) \ubaa9\uc801: \uac1c\ubcc4 \ubcf4\uc548 \ucde8\uc57d\uc810\uc5d0 \uace0\uc720 \uc2dd\ubcc4\uc790(ID)\ub97c \ubd80\uc5ec\ud574 \uc2dd\ubcc4 \uac00\ub2a5\ud558\uac8c \ud568 \ud615\uc2dd: CVE-2024-12345 \ub0b4\uc6a9: \uc81c\ud488, \ucde8\uc57d\uc810 \uc124\uba85, \uc601\ud5a5 \ubc94\uc704 \ub4f1 \uac04\ub7b5 \uc815\ubcf4 \uc6b4\uc601 \uc8fc\uccb4: MITRE Corporation (\ubbf8\uad6d \uc815\ubd80 \ud6c4\uc6d0) \uc0ac\uc6a9 \uc608: \ubcf4\uc548 \ud328\uce58\ub098 \ub9ac\uc2a4\ud06c \uad00\ub9ac \ub3c4\uad6c\uc5d0\uc11c \ucde8\uc57d\uc810\uc744 \uc9c0\uce6d\ud560 \ub54c \uc0ac\uc6a9 \ud83d\udccc 2. CWE (Common Weakness Enumeration) \ubaa9\uc801: \ubcf4\uc548 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66,12],"tags":[],"class_list":["post-8680","post","type-post","status-publish","format-standard","hentry","category-computing_fortify","category-computing_security"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8680"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8680\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}