# Vulnerability Assessment Combining CVSS Temporal Metrics and Bayesian Networks

arXiv: https://arxiv.org/abs/2506.18715 · HTML: https://mlsanity.com/paper/2506.18715/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 23 Jun 2025.

## Built on by (most cited first, 1 of 1)

- [Dynamic Risk Assessment by Bayesian Attack Graphs and Process Mining](https://mlsanity.com/paper/2604.18080/) (2026)

## Abstract (arXiv)

Vulnerability assessment is a critical challenge in cybersecurity, particularly in industrial environments. This work presents an innovative approach by incorporating the temporal dimension into vulnerability assessment, an aspect neglected in existing literature. Specifically, this paper focuses on refining vulnerability assessment and prioritization by integrating Common Vulnerability Scoring System (CVSS) Temporal Metrics with Bayesian Networks to account for exploit availability, remediation efforts, and confidence in reported vulnerabilities. Through probabilistic modeling, Bayesian networks enable a structured and adaptive evaluation of vulnerabilities, allowing for more accurate prioritization and decision-making. The proposed approach dynamically computes the Temporal Score and updates the CVSS Base Score by processing data on exploits and fixes from vulnerability databases.