CVSS Lens

A reader for CVSS 3.1 vectors. Paste one and read what it says: the score on its scale, one plain sentence, one line per metric, and the arithmetic behind the number.

What it says

MetricRatingIn words
How the score is worked out

Build or change the vector

Pick a rating for each metric. Every option is listed, so you can see what the one you picked rules out. The vector and the score follow as you go.

Exploitability: how the attack happens

Impact: what a successful attack costs

Environmental metrics

These describe one deployment rather than the vulnerability. Set them and a second score appears: what this bug is worth here. Everything left at Not defined falls back to the base metric above.

How much each loss matters here

The base metrics, as they stand here