CVSS Calculator - TestMu AI (Formerly LambdaTest)

What is CVSS?

CVSS stands for the Common Vulnerability Scoring System. It is an open industry standard maintained by FIRST.org for rating the severity of software security vulnerabilities, producing a numerical score from 0.0 to 10.0 that captures how exploitable a vulnerability is and how much impact it has on confidentiality, integrity, and availability.

What is the CVSS calculator?

The CVSS calculator is a free online tool that computes CVSS v3.1 base, temporal, and environmental scores from a set of input metrics — attack vector, attack complexity, privileges required, user interaction, scope, and the confidentiality, integrity, and availability impacts. Security teams use the resulting score and vector string to triage vulnerabilities, write advisories, and meet compliance requirements.

How to use this CVSS calculator?

• Pick Base Metrics: Select values for attack vector, attack complexity, privileges required, user interaction, scope, and the confidentiality, integrity, and availability impacts that describe the vulnerability.
• Add Temporal & Environmental Metrics (optional): Refine the score with exploit code maturity, remediation level, report confidence, and environment-specific modifiers for your deployment.
• Read the Score: The calculator updates the base, temporal, and environmental scores in real time and emits the canonical CVSS v3.1 vector string for use in advisories and ticketing systems.

What are the features of this tool?

• Free and Convenient Access: No signup or installation required to compute CVSS scores.
• CVSS v3.1 Compliant: Implements the official FIRST.org v3.1 specification for base, temporal, and environmental scoring.
• Vector String Output: Produces the canonical CVSS:3.1 vector string for copy-paste into advisories, CVEs, and ticketing systems.
• Real-Time Calculation: Scores recalculate instantly as you change metrics, so you can compare attack scenarios side-by-side.

Frequently Asked Questions

Which version of CVSS does this calculator support?

The calculator implements the official CVSS v3.1 specification maintained by FIRST.org, covering base, temporal, and environmental metric groups.

What is a CVSS vector string?

A vector string is the canonical text encoding of all the metric values you selected — for example, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H — used in advisories, CVE records, and security tooling.

How are CVSS severity ratings categorised?

CVSS v3.1 maps numeric scores to qualitative ratings: 0.0 = None, 0.1–3.9 = Low, 4.0–6.9 = Medium, 7.0–8.9 = High, and 9.0–10.0 = Critical.

Why use temporal and environmental scores?

Temporal metrics adjust the base score for real-world exploit and patch availability over time, while environmental metrics tune the score to the specific deployment context of an organisation.

Is the CVSS calculator free to use?

Yes, the CVSS calculator is completely free with no signup or hidden charges, and the calculation runs entirely in your browser.