Free CVSS Calculator

🛡️ CVSS Calculator v3.1

Calculate Common Vulnerability Scoring System (CVSS) scores for security vulnerabilities

NOT SCORED

0.0

CVSS:3.1/AV:_/AC:_/PR:_/UI:_/S:_/C:_/I:_/A:_

Base Metrics

Attack Vector (AV)

How the vulnerability is exploited

Network (N) - Remotely exploitable Adjacent (A) - Local network required Local (L) - Local access required Physical (P) - Physical access required

Attack Complexity (AC)

Conditions beyond attacker's control

Low (L) - No special conditions High (H) - Special conditions required

Privileges Required (PR)

Level of privileges needed

None (N) - No privileges needed Low (L) - Basic user privileges High (H) - Admin privileges needed

User Interaction (UI)

User participation requirement

None (N) - No user interaction Required (R) - User must participate

Scope (S)

Impact beyond vulnerable component

Unchanged (U) - Impact limited to vulnerable component Changed (C) - Impact beyond vulnerable component

Confidentiality (C)

Impact on data confidentiality

None (N) - No information disclosure Low (L) - Some information disclosed High (H) - Total information disclosure

Integrity (I)

Impact on data integrity

None (N) - No integrity impact Low (L) - Limited integrity impact High (H) - Total integrity loss

Availability (A)

Impact on system availability

None (N) - No availability impact Low (L) - Reduced performance High (H) - Total availability loss

About CVSS Calculator

The Common Vulnerability Scoring System (CVSS) is an industry standard for assessing the severity of computer system security vulnerabilities. CVSS v3.1 provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity.

CVSS Score Ranges

None: 0.0 | Low: 0.1-3.9 | Medium: 4.0-6.9 | High: 7.0-8.9 | Critical: 9.0-10.0

How to Use This Calculator

Select the appropriate values for each metric based on the vulnerability characteristics. The calculator will automatically compute the CVSS base score and generate the vector string. This tool helps security professionals, developers, and IT teams assess and prioritize vulnerability remediation efforts.