Membership in FIRST is not required to use or implement CVSS. While FIRST owns all right and interest inĬVSS, it licenses it to the public freely for use, subject to the conditionsīelow. FIRST reserves the right to update CVSS and this document Organization, whose mission is to help computer security incident response teamsĪcross the world. The most current CVSS resources can be found at ĬVSS is owned and managed by FIRST.Org, Inc. The official specification for CVSS version 3.1. Representation of the values used to derive the score. Score is also represented as a vector string, a compressed textual The Base metrics produce a score ranging from 0 to 10, whichĬan then be modified by scoring the Temporal and Environmental metrics. Group represents the characteristics of a vulnerability that are unique to a

Over time and across user environments, the Temporal group reflects theĬharacteristics of a vulnerability that change over time, and the Environmental Group represents the intrinsic qualities of a vulnerability that are constant CVSSĬonsists of three metric groups: Base, Temporal, and Environmental. The Common Vulnerability Scoring System (CVSS) is an open framework forĬommunicating the characteristics and severity of software vulnerabilities.

If you wish to use a specific version of the Specification Document, use:Ĭommon Vulnerability Scoring System v3.1: Specification Document It is currently CVSS version 3.1, released in June 2019. This page updates with each release of the CVSS standard. Common Vulnerability Scoring System version 3.1: Specification Document CVSS Version 3.1 Release

Modicon concept 2.6 software download