SecurityTable-stakes
CVE
Also written as Common Vulnerabilities and Exposures, CVSS
The public numbering system for known security vulnerabilities — each gets an ID like CVE-2021-44228 and a severity score.
Think of it like
Like a recall number for a faulty part: a shared reference so everyone knows exactly which fault is being discussed.
Junior or senior?
Naming CVEs is baseline security literacy. The signal is in how they triaged them, not that they know the term.
Ask them
“Tell me about a CVE that mattered to your systems. How did you work out whether you were actually exposed?”