Skip to main content

CVSS Calculator Integration

Each report has a CVSS calculator. Use it to score the severity of a vulnerability in a consistent way.

Use the calculator​

  1. Open the report in Submissions.
  2. In the CVSS Calculator panel, select 3.1 or 4.0.
  3. Select a value for each base metric, for example Attack Vector, Attack Complexity and Privileges Required.
  4. Click Apply to Submission.

The calculator shows the base score and the vector string while you select values. When you apply the score, CVD Portal saves the vector and the score on the report. It also sets the report severity (Low, Medium, High or Critical) from the score.

The calculator scores base metrics only. It does not score CVSS 3.1 temporal or environmental metrics, or CVSS 4.0 threat or environmental metrics.

Where the score goes​

When you generate a CSAF advisory from a report with a CVSS 3.x vector, the advisory includes the vector, base score and severity. CSAF 2.0 has no CVSS 4.0 score object, so a CVSS 4.0 vector goes into a note in the advisory. See CSAF Advisory Export.