In reply to Bill Thomson.

Thank you Bill! Yes indeed. CVSSv3 has introduced a lot of great enhancements that addressed some of the challenges that existed in CVSSv2. CVSSv3 analyzes the scope of a vulnerability and identifies the privileges an attacker needs to exploit it. The enhancements to CVSS will allow vendors, such as Cisco, to better analyze security vulnerability impact. The changes will also more clearly define the urgency of responding to the vulnerability for our customers.