Which of the following is a use of CVSS?

CVSS (Common Vulnerability Scoring System) provides a standardized method for rating the severity of software vulnerabilities. This score helps organizations objectively assess the risk posed by different vulnerabilities and, crucially, prioritize which ones need immediate attention for remediation. While CVSS helps understand the impact of a vulnerability, it doesn't directly calculate patching costs. Identifying unused ports and services is a network hardening task, not a direct application of CVSS. Analyzing code for defects is part of static or dynamic application security testing, distinct from CVSS's role in vulnerability scoring.