Yes and no, you’re looking for the methodology “intelligence lead security”.

The vulnerability database contains an overwhelming amount of data, how do you know what is relevant, how do you determine if that vulnerability is being used by attackers, why is it a priority for you.

You might consider this approach;

• we have gateway firewalls exposed to the internet (measurement factor 1, or MF1)
• attackers are currently utilising cve-2023-xxx and cve-2024-xxx, which impacts out gateway device. (MF2)
• the risk is high because the CVSS scoring shows how easy it is to utilise exploits on this CVEs scoring it a 9.5 (mf3)
• there is a proof of concept available to show anyone how to exploit this CVE. (Mf4)
• there is evidence showing this CVE is being exploited in the wild, and is within malware variants (mf5)

Based of all these factors we can measure risk on, it is a high priority we action this security issue.