Designing a Scalable Vulnerability Management Lifecycle Using CVSS v3 and CWE Classification

As digital infrastructures expand, the scalable and context-aware management of software vulnerabilities is crucial to organizations.This article offers an integration of international research trends since 2020 regarding how the Common Vulnerability Scoring System (CVSS v3) and Common Weakness Enumeration (CWE) can be incorporated into dynamic and scalable Vulnerability Management (VM) lifecycles.Through examination of the state-of-the-art, real-world deployments, and experimental outcomes, the paper finds strengths in machine learning integration, DevSecOps orchestration, and context-aware risk modeling.However, there are some challenges, such as the limitations of static scoring, interoperability limitations, and limited data availability.The review concludes with a layered model proposing the joining of explainable AI, asset metadata, and feedback loops to result in predictive, business-aligned vulnerability management.We provide directions for future work to address outstanding research challenges and aid the advancement of smart, resilient VM systems.