00:01:52 Public preview period for CVSS v4
00:02:57 How is CVSS v4 different?
00:06:19 CVSS expresses both a number and a vector!
00:08:42 Who should use CVSS?
00:10:52 Adjusting the released CVSS score according to your environment
00:11:54 CVSS is a severity scoring system, NOT a risk scoring system
00:14:18 The uses of temporal and environmental scores
00:16:19 Adding context to CVSS using runtime information: the Datadog example
00:28:02 The log4shell example
00:35:11 Applying CVSS v4 to log4shell