Your files stay on your device

CVSS 4.0 calculator

Score CVSS 4.0 vectors with FIRST's reference MacroVector table and get the score, severity band, vector string and the CVSS-B, BT, BE or BTE label.

Enter a vector to score it.

The score comes from FIRST's own reference implementation: the 270-entry MacroVector equivalence table from the CVSS v4.0 specification plus the depth interpolation around it, ported unchanged. Unset values are not neutral: exploit maturity scores as Attacked, requirements grade High, and modified metrics follow their base values. Severity bands are None at 0, Low to 3.9, Medium to 6.9, High to 8.9, Critical above.

Vector

Vector stringPaste to load, or pick values below; the two stay in sync

Base

Attack vector

Attack complexity

Attack requirements

Privileges required

User interaction

Confidentiality, vulnerable system

Integrity, vulnerable system

Availability, vulnerable system

Confidentiality, subsequent system

Integrity, subsequent system

Availability, subsequent system

More settings

Threat

Exploit maturity

Environmental

Confidentiality requirement

Integrity requirement

Availability requirement

Modified attack vector

Modified attack complexity

Modified attack requirements

Modified privileges required

Modified user interaction

Modified confidentiality, vulnerable

Modified integrity, vulnerable

Modified availability, vulnerable

Modified confidentiality, subsequent

Modified integrity, subsequent

Modified availability, subsequent

Supplemental

Safety

Automatable

Recovery

Value density

Vulnerability response effort

Provider urgency

Supplemental metrics are reported but never move the score.

The vector caps at 400 characters, which covers the longest valid one. Other CVSS versions, 3.1 included, are refused rather than converted.

All network tools

Was this tool useful?

CVSS 4.0 calculator

More network tools