Skip to main content

CVSSCalculator

This Script is part of the Common Scripts Pack.#

This script calculates the CVSS Base Score, Temporal Score, and Environmental Score using either the CVSS 3.0 or CVSS 3.1 calculator according to https://www.first.org/cvss/ calculation documentation.

Script Data#


NameDescription
Script Typepython3
Cortex XSOAR Version5.0.0

Inputs#


Argument NameDescription
versionThe CVSS version to use for scoring. Can be "3.1" or "3.0". Default is "3.1".
AVAttack Vector. Can be "N", "A", "L", or "P".
ACAttack Complexity. Can be "L" or "H".
PRPrivileges Required. Can be "N", "L", or "H".
UIUser Interaction. Can be "N" or "R".
SScope. Can be "U" or "C".
CConfidentiality. Can be "H", "L", or "N".
IIntegrity. Can be "H", "L", or "N".
AAvailability. Can be "H", "L", or "N".
EExploit Code Maturity. Can be "X", "H", "F", "P", or "U". Default is "X".
RLRemediation Level. Can be "X", "U", "W", "T", or "O". Default is "X".
RCReport Confidence. Can be "X", "C", "R", or "U". Default is "X".
CRConfidentiality Requirement. Can be "X", "H", "M", or "L". Default is "X".
IRIntegrity Requirement. Can be "X", "H", "M", or "L". Default is "X".
ARAvailability Requirement. Can be "X", "H", "M", or "L". Default is "X".
MAVModified Attack Vector. Can be "X", "N", "A", "L", or "P". Default is "X".
MACModified Attack Complexity. Can be "X", "L", or "N". Default is "X".
MPRModified Privileges Required. Can be "X", "N", "L", or "H". Default is "X".
MUIModified User Interaction. Can be "X", "N", or "R". Default is "X".
MSModified Scope. Can be "X", "U", or "C". Default is "X".
MCModified Confidentiality. Can be "X", "N", "L", or "H". Default is "X".
MIModified Integrity. Can be "X", "N", "L", or "H". Default is "X".
MAModified Availability. Can be "X", "N", "L", or "H". Default is "X".

Outputs#


PathDescriptionType
CVSS.VectorStringText notation of the score.string
CVSS.ImpactSubScoreImpact sub-score.number
CVSS.ImpactImpact Score.number
CVSS.ExploitabilityExploitability score.number
CVSS.BaseScoreBase score.number
CVSS.TemporalScoreTemporal score.number
CVSS.ModifiedImpactSubScoreModified impact sub-score.number
CVSS.ModifiedImpactModified impact.number
CVSS.ModifiedExploitabilityModified exploitability score.number
CVSS.EnvironmentalScoreEnvironmental score.number
CVSS.VersionVersion of CVSS used in the calculation.number