Automatically Assessing a Severity of a Vulnerability Via Social Media

A computing device comprising:

• a processor;
• a network interface coupled to the processor to enable communication over a network;
• a storage device coupled to the processor;
• a vulnerability engine code stored in the storage device, wherein an execution of the code by the processor configures the computing device to perform acts comprising:
• identifying a vulnerability related to a computing device;
• identifying one or more technical experts for each of one or more categories of vulnerabilities of the identified vulnerability;
• iteratively sending questions to and receiving answers from one or more identified technical experts in each of the one or more categories of vulnerabilities, via a chatbot module of the computing device;
• determining answers to parameters that are missing for a common vulnerability scoring system (CVSS) for the identified vulnerability, from the received answers from the one or more identified technical experts;
• validating the determined answers to the parameters;
• and
• creating a CVSS score based on the validated determined answers.