Evaluating the Interpretability and Clarity of CVE Descriptions for CVSS Scoring

Welcome

Thank you for taking part in this survey. We are looking for participants who are over 18 years old and who have some involvement with CVEs — whether that’s writing, reviewing, or working with them in your role. Your input will help us better understand how people interpret and evaluate CVE descriptions when assigning CVSS metrics.

The survey should take about 30 minutes to complete. There are no right or wrong answers — we are interested in your reasoning and judgement, not in testing your knowledge.

Survey Structure

1. Information & Consent – please read and confirm before beginning.
2. Preliminary & Demographics – a few questions about your role and background.
3. Justification Tasks – read CVE descriptions and judge how well they support a specific CVSS value.
4. Feedback Section – space for any additional comments.

When you’re ready, click Next to view the information sheet, ethics details, and consent agreement.