CVE scores are already inflated because it looks good for their discoverers.