Tools / CVSS Calculator
CVSS Calculator
CVSS v3.1 base score calculator. Select each metric to compute the score, severity rating, and vector string — entirely in your browser.
0.0
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
// About this tool
CVSS v3.1 Calculator
This calculator computes the CVSS v3.1 base score for a vulnerability from its base metrics: attack vector, attack complexity, privileges required, user interaction, and the confidentiality, integrity, and availability impact values.
You get the numeric score, the severity rating, and the full vector string (for example, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) that you can paste into an advisory, a ticket, or a CVE entry.
Everything is calculated locally in your browser — nothing is uploaded, and the calculator works fully offline. The math follows the FIRST CVSS v3.1 specification.
// When to use it
Score a finding for a vulnerability report
Select the base metrics for a vulnerability and get the score, severity, and vector string for your advisory or disclosure.
Triage findings consistently
Use the same calculator for every finding so severity ratings stay consistent across your team or program.
Understand an existing CVSS vector
Work backwards from a vector string you found in an advisory and see which metric values produced the score.
// Questions
Which CVSS version does this use?
CVSS v3.1, following the FIRST.org specification. The calculator covers the base metrics that produce the score and vector string.
Does it calculate temporal or environmental scores?
Not yet. The current tool computes the base score only. Temporal and environmental modifiers are on the roadmap.
Is my data uploaded?
No. All scoring math runs locally in your browser — nothing is sent to a server.
Why does the score differ from another calculator?
Scores differ when metric values are entered differently — for example, whether scope is changed, or how privileges required is interpreted. The vector string is the exact record of the values used.
// Related tools