Severity estimates how bad it would be

Critical, high, medium, low. Broadly: critical means immediate and serious compromise, high means serious with some conditions, medium means real but constrained, low means worth tidying.

CVSS is the standard scoring system that produces a number from zero to ten. Useful for consistency, and famously blunt: it does not know whether the affected component is your login system or a marketing page.