In large networks, security teams receive hundreds of CVE notifications every day. It is resource-intensive to patch all vulnerabilities at once and immediately. CVE Severity is based on the CVSS (Common Vulnerability Scoring System) system, which measures the risk of vulnerabilities from 0.
Source: [Dev.to](https://dev.to/nara_naghi/cve-severity-risk-based-prioritization-394j)