CVSS - jibingl/CCNA-CCNP GitHub Wiki
The Common Vulnerability Scoring System (CVSS) is an open framework for communicating the characteristics and severity of software vulnerabilities.
| Rating | None | Low | Medium | High | Critical |
|---|---|---|---|---|---|
| CVSS Score | 0.0 | 0.1 - 3.9 | 4.0 - 6.9 | 7.0 - 8.9 | 9.0 - 10.0 |
| Metrics Group | Base | Threat/Temporal | Environmental | Supplemental |
|---|---|---|---|---|
| Version 4.0 | AV, AC, AT, PR, UI VC/SC, VI/SI, VA/SA |
E | CR, IR, AR MAV, MAC, MAT, MPR, MUI MVC/MSC, MVI/MSI, MVA/MSA |
S, AU, U, R, V, RE |
| Version 3.1 & 3.0 | AV, AC, PR, UI S C, I, A |
E, RL, RC | CR, IR, AR MAV, MAC, MPR, MUI MS MC, MI, MA |
|
| Version 2 | AV, AC, Au, C, I, A | E, RL, RC | CDP, TD, CR, IR, AR | |
| Version 1 | IB, AV, AC, Au, C, I, A | E, RL, RC | CDP, TD |