Universal CVSS Calculator by {metæffekt}
Use the buttons to add vectors or read the
Usage Guide
The CVSS Calculator allows you to calculate the CVSS score of a vulnerability based on the CVSS
standard.
It stands out because of its ability to manage multiple vectors at once, calculate all available scores
for each vector, and visualize them in a radar chart.
You can directly edit the vector in the above text field, but below, you'll find a series of accordion
elements, each representing a different segment of the CVSS vector, which allow for more convenient
editing.
Expand an accordion section by clicking its header to view and modify the individual components of that
vector segment.
The icon next to each metric provides an
interactive user guide that allows to easily set the metric to a desired value without having to
remember what each value means.
If a vector already has all its base metrics defined, the user guide will be hidden.
Certain CVSS versions do not normalize all their scores to a 0-10 scale before displaying them.
For example, the Exploitability Score of CVSS:3.1 only has a version range of 0-6.1, which can confuse
users.
To make the scores more comparable, the calculator will display a scaled score alongside the original
score, which looks as follows: 3.4 →
5.7
The radar chart on the right visualizes these scores. Vectors can be excluded from this chart using the eye icon in the vector list. A thicker and dotted line means that the vector is currently selected. The selected vector will also be displayed below the radar chart.
Toggle the switch at the top of the radar chart to split it into multiple charts for each CVSS version,
improving readability when many vectors are present.
Creating new CVSS vectors
Using the buttons and input field at the top, you can:-
Click on the first button that says
CVSSto import multiple vectors at once. - Click on of the buttons next to it to add a vector of that CVSS version.
- Input a CVSS vector of any version in the input field and press enter.
- Input a CVE-ID and press enter to fetch the vectors of this CVE from the NVD.
Editing CVSS vectors
Click on a vector in the list to select it. A small arrow will appear to the left of the selected vector.
You can directly edit the vector in the above text field, but below, you'll find a series of accordion
elements, each representing a different segment of the CVSS vector, which allow for more convenient
editing.
Expand an accordion section by clicking its header to view and modify the individual components of that
vector segment.
The icon next to each metric provides an
interactive user guide that allows to easily set the metric to a desired value without having to
remember what each value means.If a vector already has all its base metrics defined, the user guide will be hidden.
Interpreting the results
The table below the vector list shows the available calculated scores for each CVSS vector.
Certain CVSS versions do not normalize all their scores to a 0-10 scale before displaying them.
For example, the Exploitability Score of CVSS:3.1 only has a version range of 0-6.1, which can confuse
users.
To make the scores more comparable, the calculator will display a scaled score alongside the original
score, which looks as follows: 3.4 →
5.7The radar chart on the right visualizes these scores. Vectors can be excluded from this chart using the eye icon in the vector list. A thicker and dotted line means that the vector is currently selected. The selected vector will also be displayed below the radar chart.
Toggle the switch at the top of the radar chart to split it into multiple charts for each CVSS version,
improving readability when many vectors are present.
CVSS:4.0
CVSS:4.0 differs from previous versions in several ways:- Only a Base Score is provided, which is used on every axis of the radar chart.
-
During calculation, a
MacroVectoris calculated from the vector, which is a representation of the vector with a reduced amount of dimensions. This MacroVector is displayed below the radar chart if a CVSS:4.0 vector is selected. -
The
supplementalmetrics are purely informational and do not affect the calculated score.