Common Vulnerability Scoring System Version 2.0 Calculator

Base Score

Attack Vector (AV)

Network (N) Adjacent Network (A) Local (L)

Access Complexity (AC)

Low (L) Medium (M) High (H)

Authentication (Au)

None (N) Single (S) Multiple (M)

Confidentiality (C)

None (N) Partial (P) Complete (C)

Integrity (I)

None (N) Partial (P) Complete (C)

Availability (A)

None (N) Partial (P) Complete (C)

Select values for all base metrics to generate score

Vector String - select values for all base metrics to generate a vector

Temporal Score

Exploitability (E)

Not Defined (ND) Unproven (U) Proof-of-Concept (POC) Functional (F) High (H)

Remediation Level (RL)

Not Defined (ND) Official Fix (OF) Temporary Fix (TF) Workaround (W) Unavailable (U)

Report Confidence (RC)

Not Defined (ND) Unconfirmed (UC) Uncorroborated (UR) Confirmed (C)

Select values for all base metrics to generate score

Environmental Score

Collateral Damage Potential (CDP)

Not Defined (ND) None (N) Low (L) Low-Medium (LM) Medium-High (MH) High (H)

Target Distribution (TD)

Not Defined (ND) None (N) Low (L) [1% - 25%] Medium (M) [26% - 75% ] High (H) [76% - 100%]

Confidentiality Requirement (CR)

Not Defined (ND) Low (L) Medium (M) High (H)

Integrity Requirement (IR)

Not Defined (ND) Low (L) Medium (M) High (H)

Availability Requirement (AR)

Not Defined (ND) Low (L) Medium (M) High (H)

Select values for all base metrics to generate score

Language
- English
- Japanese