CVSS v3.1 base score calculator

Calculate a vulnerability's base severity and export its scoring vector. All eight base metrics are explicit.

This tool implements CVSS 3.1 Base only. It does not calculate CVSS 4.0, Temporal or Environmental scores, detect vulnerabilities or estimate exploitation probability. A score is not a remediation deadline.

Select the metrics and calculate a score.

Method and attribution

The calculation uses the Scope-dependent impact and privilege weights and the Roundup method in Appendix A of the FIRST CVSS v3.1 specification. CVSS is owned by FIRST and used by permission. The vector records every choice so another analyst can reproduce the score.

Choose the metrics using the original advisory and your own assessment. The tool does not send or store your inputs. For current CVSS versions, consult FIRST. See our CVE document reference for source-checking guidance.