CVSS 4.0 & 3.1 Calculator
Build or import a vulnerability severity vector using CVSS 4.0 or 3.1. Record the reasoning behind your metric choices and export a compact assessment for a consulting report.
About CVSS calculatorFeatures & how to use
Calculate CVSS 4.0 and 3.1 vectors locally, review base and optional metrics, and export a Markdown severity assessment with analyst justification.
What it can do
- Support CVSS 4.0 Base, Threat, Environmental and Supplemental metrics; Supplemental values do not change the score.
- Support CVSS 3.1 Base, Temporal and Environmental scores with modified metrics and explicit scope handling.
- Validate required metrics, accepted values and duplicates before scoring. Export the normalized vector, metric labels and analyst justification.
- CVSS measures vulnerability severity, not business risk, authorization or proof of exploitability. Different CVSS versions are not interchangeable.
How to use it
- Select CVSS 4.0 or 3.1 and paste a vector or choose metrics.
- Review optional metric groups and record assumptions in Analyst justification.
- Copy or download the local Markdown assessment.