Risk-based vulnerability management shows why CVSS alone isn't enough and how IT teams can prioritize and remediate vulnerabilities based on endpoint and threat context.