Free Engineering Workbench calculator
CVSS v3.1 base score
Score a vulnerability the way scanners and the NVD do, to set its fix deadline.
Cybersecurity & cyber assuranceHow it's worked out
- ISS = 1 − (1 − C)(1 − I)(1 − A). Impact = 6.42 × ISS (scope unchanged) or 7.52 × (ISS − 0.029) − 3.25 × (ISS − 0.02)^15. Exploitability = 8.22 × AV × AC × PR × UI. Base = roundup(min(impact + exploitability, 10)), × 1.08 if scope changed
- FIRST CVSS v3.1 specification weights
NoteThe base score ignores whether exploits exist and how exposed the asset is. Combine it with threat intelligence, such as CISA KEV or EPSS, before setting priority. CVSS v4.0 is also in use.
Source: FIRST CVSS v3.1 Specification Document
Need help acting on this number?
VVnT SeQuor's Cybersecurity & Cyber Assurance practice helps teams turn this metric into a plan.