module

CVSS::V3::Score

Score computation for CVSS v3.0 / v3.1.

Section references in this module point at the official specs:

  • CVSS v3.0: https://www.first.org/cvss/v3.0/specification-document
  • CVSS v3.1: https://www.first.org/cvss/v3.1/specification-document

Instance methods

base_score(v : Vector) : Float64
Source
environmental_score(v : Vector) : Float64
Source
exploitability(v : Vector) : Float64

Exploitability subscore.

Source
impact(v : Vector) : Float64

Impact subscore — scaled by Scope.

Source
iss(v : Vector) : Float64

Impact Sub-Score (ISS) — the raw impact value before scope-aware scaling. ISS = 1 - ((1 - C) × (1 - I) × (1 - A))

Source
roundup(input : Float64, version : String) : Float64
Source
roundup30(input : Float64) : Float64

CVSS v3.0 RoundUp = ceiling(input * 10) / 10. The intermediate multiplication is run through an integer round-trip so values like 4.65 * 10 = 46.4999... don't quietly become 4.6.

Source
roundup31(input : Float64) : Float64

CVSS v3.1 RoundUp (spec §7.1).

Avoids the floating-point traps in the v3.0 ceiling/10 formulation by working in integer space first.

Source
temporal_score(v : Vector) : Float64

Returns base_score if no temporal metrics are set (all default to X).

Source