Common Vulnerability Scoring System Version 3.1 Calculator

Common Vulnerability Scoring System Version 3.1 Calculator

Hover over metric group names, metric names and metric values for a summary of the information in the official CVSS v3.1 Specification Document. The Specification is available in the list of links on the left, along with a User Guide providing additional scoring guidance, an Examples document of scored vulnerabilities, and notes on using this calculator (including its design and an XML representation for CVSS v3.1).

Base Score

Attack Vector (AV)

Network (N) Adjacent (A) Local (L) Physical (P)

Attack Complexity (AC)

Low (L) High (H)

Privileges Required (PR)

None (N) Low (L) High (H)

User Interaction (UI)

None (N) Required (R)

Scope (S)

Unchanged (U) Changed (C)

Confidentiality (C)

None (N) Low (L) High (H)

Integrity (I)

None (N) Low (L) High (H)

Availability (A)

None (N) Low (L) High (H)

Select values for all base metrics to generate score

Vector String - select values for all base metrics to generate a vector

Temporal Score

Exploit Code Maturity (E)

Not Defined (X) Unproven (U) Proof-of-Concept (P) Functional (F) High (H)

Remediation Level (RL)

Not Defined (X) Official Fix (O) Temporary Fix (T) Workaround (W) Unavailable (U)

Report Confidence (RC)

Not Defined (X) Unknown (U) Reasonable (R) Confirmed (C)

Select values for all base metrics to generate score

Environmental Score

Confidentiality Requirement (CR)

Not Defined (X) Low (L) Medium (M) High (H)

Integrity Requirement (IR)

Not Defined (X) Low (L) Medium (M) High (H)

Availability Requirement (AR)

Not Defined (X) Low (L) Medium (M) High (H)

Modified Attack Vector (MAV)

Not Defined (X) Network Adjacent Network Local Physical

Modified Attack Complexity (MAC)

Not Defined (X) Low High

Modified Privileges Required (MPR)

Not Defined (X) None Low High

Modified User Interaction (MUI)

Not Defined (X) None Required

Modified Scope (MS)

Not Defined (X) Unchanged Changed

Modified Confidentiality (MC)

Not Defined (X) None Low High

Modified Integrity (MI)

Not Defined (X) None Low High

Modified Availability (MA)

Not Defined (X) None Low High

Select values for all base metrics to generate score

• Common Vulnerability Scoring System (CVSS-SIG)
  • Calculator
  • Specification Document
  • User Guide
  • Implementation Guide
  • Examples
  • Frequently Asked Questions
  • CVSS v4.0 Documentation & Resources
    • CVSS v4.0 Calculator
    • CVSS v4.0 Specification Document
    • CVSS v4.0 User Guide
    • CVSS v4.0 Implementation Guide
    • CVSS v4.0 Examples
    • CVSS v4.0 FAQ
  • CVSS v3.1 Archive
    • CVSS v3.1 Calculator
    • CVSS v3.1 Specification Document
    • CVSS v3.1 User Guide
    • CVSS v3.1 Examples
    • CVSS v3.1 Calculator Use & Design
  • CVSS v3.0 Archive
    • CVSS v3.0 Calculator
    • CVSS v3.0 Specification Document
    • CVSS v3.0 User Guide
    • CVSS v3.0 Examples
    • CVSS v3.0 Calculator Use & Design
  • CVSS v2 Archive
    • CVSS v2 Complete Documentation
    • CVSS v2 History
    • CVSS-SIG team
    • SIG Meetings
    • Frequently Asked Questions
    • CVSS Adopters
    • CVSS Links
  • CVSS v1 Archive
    • Introduction to CVSS
    • Frequently Asked Questions
    • Complete CVSS v1 Guide
  • JSON & XML Data Representations
  • CVSS On-Line Training Course
  • Identity & logo usage