An overview of vulnerability scoring systems like CVSS, EPSS, and SSVC, and their role in security risk management, based on a talk by Tod Beardsley.