Home / Tools / CVSS Calculator

CVSS Calculator implements CVSS v3.1

This calculator implements the official CVSS v3.1 Base Score formula as published by FIRST.org (the same math used by NVD). Select the eight base metrics and the score, severity, subscores and vector string update live.

⚠️ CVSS scores are a severity rating, not a risk rating. They do not account for your environment, exposure or business context — use them inside a broader risk assessment.
Base Score
0.0
None
Exploitability
0.00
Impact
0.00
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

How the score is calculated (CVSS v3.1)

Impact Sub-Score (ISS) = 1 − [(1−C) × (1−I) × (1−A)]. If Scope Unchanged: Impact = 6.42 × ISS; if Scope Changed: Impact = 7.52 × (ISS − 0.029) − 3.25 × (ISS − 0.02)^15. Exploitability = 8.22 × AV × AC × PR × UI. Base Score = Roundup(min(Impact + Exploitability, 10)), or Roundup(min(1.08 × (Impact + Exploitability), 10)) when Scope is Changed. Privileges Required is weighted differently when Scope is Changed, per the specification. Severity bands: 0.0 None, 0.1–3.9 Low, 4.0–6.9 Medium, 7.0–8.9 High, 9.0–10.0 Critical.

Related tools

ISO 27001 Risk Calculator → · All free tools →

Interviewers love CVSS questions.

Can you explain why Scope Changed raises the score? Practice answering out loud — the AI grades you like a hiring manager.

Practice with CyberVerse AI →