Skip to content
FeIix edited this page May 8, 2026 · 3 revisions

The Common Vulnerability Scoring System (CVSS) is an open framework for communicating the characteristics and severity of software vulnerabilities.

Rating None Low Medium High Critical
CVSS Score 0.0 0.1 - 3.9 4.0 - 6.9 7.0 - 8.9 9.0 - 10.0

Calculable Metrics of CVSS

Metrics Group Base Threat/Temporal Environmental Supplemental
Version 4.0 AV, AC, AT, PR, UI
VC/SC, VI/SI, VA/SA
E CR, IR, AR
MAV, MAC, MAT, MPR, MUI
MVC/MSC, MVI/MSI, MVA/MSA
S, AU, U, R, V, RE
Version 3.1 & 3.0 AV, AC, PR, UI
S
C, I, A
E, RL, RC CR, IR, AR
MAV, MAC, MPR, MUI
MS
MC, MI, MA
Version 2 AV, AC, Au, C, I, A E, RL, RC CDP, TD, CR, IR, AR
Version 1 IB, AV, AC, Au, C, I, A E, RL, RC CDP, TD

Clone this wiki locally