CVSS Risk Calculator

Combine CVSSv3, business impact, exposure, and exploit availability into one adjusted risk score.

1
Vulnerability identifier
Optional CVE lookup. Leave empty for fully manual scoring.
Enter a CVE identifier such as CVE-2024-12345, or leave it blank for manual scoring.
Manual mode: enter a CVSSv3 base score and choose exploit availability.
2
CVSSv3 Base Score
Use the NVD value when a CVE is found, otherwise enter a value from 0.0 to 10.0.
Source: manual base score
Enter a CVSSv3 base score between 0.0 and 10.0.
3
Exploit availability
KEV listed vulnerabilities add 1. When lookup is unavailable, choose the manual override.
Source: manual no-identifier selection
Choose exploit availability.
4
Business Impact
How critical is the affected asset or service?
5
Exposure Level
Where is the vulnerable component reachable?
Severity
0 / 10
Base score source
CVSS weighted (x0.6)
Business impact
Exposure
Exploit adjustment
Exploit source
Total