O'Reilly logo
  • Joanna Irungu thinks this is interesting:

indicate the severity of a vulnerability, they rarely indicate its impact

From

Cover of Gray Hat Hacking The Ethical Hacker's Handbook, Fourth Edition, 4th Edition

Note

Difference between pentest and vulnerability assessment