Research by the National Infrastructure Advisory Council (NIAC) in 2003/2004 led to the launch of CVSS version 1 (CVSSv1) in February 2005, with the goal of being "designed to provide open and universally standard severity ratings of software vulnerabilities".
Feedback from vendors utilizing CVSSv1 in production suggested there were "significant issues with the initial draft of CVSS".