Understand what CVSS measures, how base metrics work conceptually, and why severity needs business context.