CVSS 3.1 calculator

The official base metrics, scored the way the specification says, with the vector string ready to paste into a ticket or an advisory. The URL carries the vector, so a link is the whole finding.

Everything you type stays in this tab. Share copies a link, never your inputs, unless the tool says it encodes them in the URL.

Attack vector

Attack complexity

Privileges required

User interaction

Scope

Confidentiality

Integrity

Availability

Vector string

Paste a vector here to load it, or copy this one out.

Base score only. Temporal and environmental metrics change the number for your environment, and a base score pretending to be an environmental one is how a shared spreadsheet ends up driving the wrong patch order.