AI Vulnerability Scoring System (AIVSS) Introduced at OWASP Global AppSec

A new AI Vulnerability Scoring System (AIVSS) was introduced by Ken Huang at the OWASP Global AppSec conference on November 7, 2025. This system aims to address the limitations of the Common Vulnerability Scoring System (CVSS) in evaluating vulnerabilities in modern AI technologies. The AIVSS framework builds upon CVSS while incorporating additional metrics to better assess the complexities of agentic AI.