Problem
Targeted organization:
Located in Colorado, the target organization for this project is a small, family-run firm. The business has two physical locations, one in the city center and one in a suburb. The company, which employs 10, specializes in offering local businesses marketing services. Several PCs and one server make up the company's current network. The server, which is used to store employee and customer data, is running an old version of Windows Server. Windows XP and Windows 7 are just two of the operating systems that are present on the computers.
The management team is interested in knowing what potential vulnerabilities exist for your environment. Take this opportunity to review common vulnerabilities specific to your environment and provide the following information:
A. Define what the CVE database is designed to provide to security researchers.
B. Describe how the CVSS score is calculated.
C. Describe the difference between base and temporal metrics.
D. Describe what the National Vulnerability Database is and used for.
E. Find and describe three vulnerabilities that could potentially exist in your organization, that have a CVSS severity rated as high.