Tools

CVSS v3.1 Calculator

Build a base vector, calculate the score, and validate severity before you prioritize the issue.

Attack Vector Attack Complexity Privileges Required User Interaction Scope Confidentiality Integrity Availability

Score output

Choose the metrics to generate the base vector and score.

Interactive Example

See why one metric changes the story

Example vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Try changing User Interaction from None to Required in the calculator above. The score changes because exploitation now depends on a user action.

Prioritization context

CVSSTechnical severity of the vulnerability characteristics.

EPSSProbability-style exploitation signal, not local impact proof.

CISA KEVKnown exploited catalog signal that often raises urgency.