The one the OpenSSL follows is documented here[0]. There&#x27;s also the CVSS[1] which covers a broader scope.<p>[0]: <a href="https:&#x2F;&#x2F;www.openssl.org&#x2F;policies&#x2F;secpolicy.html" rel="nofollow">https:&#x2F;&#x2F;www.openssl.org&#x2F;policies&#x2F;secpolicy.html</a><p>[1]: <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;CVSS" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;CVSS</a>