Which vulnerability list is most useful for prioritising patching?
- A CISA's Known Exploited Vulnerabilities catalogue
- B The full CVE database sorted by ID
- C A vendor's marketing list
- D The oldest unpatched items
Answer
CISA's Known Exploited Vulnerabilities catalogue
It lists what is actively being exploited, which is far more actionable than CVSS severity alone.





