) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Product Integration using NVD CVSS Calculators
Organizations that have created CVSS compatible products may integrate with the NVD CVSS calculator pages by creating a hyperlink that includes the CVSS vector or, optionally, the CVE-ID. Examples of how this can be done have been provided below.
NOTE: If you provide a CVE-ID and a CVSS vector string, the vector string provided must match the vector string stored within the NVD. If the vector string provided does not match the vector string stored in the NVD, a warning banner will display and the NVD vector string will be displayed instead. This means that when stipulating a CVE ID only Base metrics can be provided.
| Parameter | Description |
|---|---|
| name | Must represent a CVE ID. The CVE ID must be well formed and exist within the NVD dataset. |
| vector | Must be a well formed vector string for the CVSS calculator page (v2.0, 3.x, 4.0) being used. Values provided with this parameter must include all Base metric values required for the version of CVSS appropriate. |
| source | A string that represents a source within the NVD dataset. Source values can be identified by referencing the "name" property within the /source/ 2.0 API output. This parameter must be paired with "name", otherwise it will be ignored. |
| version | This parameter is only applicable for the CVSS v3.x calculator page. When providing name and vector parameters, the version of CVSS v3.x must be included or the page will default to the CVSS v3.1 option. The version provided must align with the current NVD enrichment data to avoid a warning banner as indicated above. |
CVSS v4.0 Examples
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculatorExample hyperlink to CVSS v4.0 calculator with CVE ID:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?name=CVE-2024-4976
Example hyperlink to CVSS v4.0 calculator with Base metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?vector=AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:H/SA:N
Example hyperlink to CVSS v4.0 calculator with Base and Threat metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?vector=AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:H/SA:N/E:U
Example hyperlink to CVSS v4.0 calculator with Base, Threat and Environmental metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?vector=AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:H/SA:N/E:U/MSA:S
Example hyperlink to CVSS v4.0 calculator with Base, Threat, Environmental and Supplemental metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?vector=AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:H/SA:N/E:U/MAV:N/MAC:L/MAT:N/MPR:N/MUI:N/MVC:H/AU:N/R:I/U:Red
Example hyperlink to CVSS v4.0 calculator with CVE ID, Vector String and Source:
https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator?name=CVE-2024-4976&vector=AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L&version=4.0&source=Glyph%20%26%20Cog,%20LLC
CVSS v3.x Examples
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculatorExample hyperlink to CVSS v3.x calculator with CVE ID:
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2016-0051&version=3.0
Example hyperlink to CVSS v3.x calculator with Base metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Example hyperlink to CVSS v3.x calculator with Base and Temporal metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:T/RC:R
Example hyperlink to CVSS v3.x calculator with Base, Temporal and Environmental metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:R/MS:C/MC:N/MI:N/MA:L
Example hyperlinks with CVE ID, Base metrics in the vector string and each v3.x calculator version toggle:
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2018-8011&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.1
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2018-8011&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.0
CVSS v2.0 Examples
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculatorExample hyperlink to CVSS v2.0 calculator with CVE ID:
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator?name=CVE-2007-1001
Example hyperlink to CVSS v2.0 calculator with Base metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator?vector=(AV:L/AC:H/Au:N/C:N/I:P/A:C)
Example hyperlink to CVSS v2.0 calculator with CVE ID and Base metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator?name=CVE-2016-0051&vector=(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Example hyperlink to CVSS v2.0 calculator with Base and Temporal metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator?vector=(AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:OF/RC:C)
Example hyperlink to CVSS v2.0 calculator with Base, Temporal and Environmental metrics in the vector string:
https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator?vector=(AV:L/AC:H/Au:N/C:N/I:P/A:C/E:POC/RL:OF/RC:C/CDP:L/TD:M/CR:L/IR:L/AR:H)