Contextualized CVSS Calculator

Calculate and contextualize CVSS v3.1 scores to prioritize your patch management.

Cybersecurity
Writing & Reports
Free

Contextualized CVSS Score Calculator

Base CVSS Score (0.0 - 10.0)

Service exposed to the Internet?

Publicly accessible?

Simple workaround/mitigation?

Simple fix available?

Public exploit exists?

CVSS Scores

Base score

5.0

Medium

ForenShield score

7.2

High

Difference: +2.2

Calculation Details

Base CVSS Score+5.0
Known Exploit+0.2
Network Segmentation+1.0
Authentication+1.0

0.05.010.0

Actions

About

Contextualized CVSS Calculator

Start from a vulnerability's base CVSS score (entered or computed from a CVSS v3.1 vector) and adjust it to your real environment to prioritize patch management. Every adjustment is itemized to justify the final criticality.

What it does

Quick mode (3 questions) or detailed mode (service, segmentation, authentication…)
Import a CVSS v3.1 vector to compute the base score
Itemized adjustments and severity level
PDF report, JSON and CSV export
History of the last 5 calculations, kept in your browser

Frequently asked questions

How is the contextualized score calculated?

The tool starts from the base CVSS score and adds or removes points based on your context: Internet exposure (+1.5), known public exploit (+1), service type (up to +2 for Active Directory), no segmentation or authentication (+1), and conversely strong segmentation (−2), MFA (−1.5) or a simple mitigation (−1).

Is this an official CVSS score?

No. The base score follows CVSS v3.1, but the contextualized score is the tool's own weighting, designed for internal patch prioritization. It does not replace FIRST's official temporal and environmental metrics.

Can I reuse the result in a report?

Yes. The PDF report includes the base score, contextualized score, severity, itemized adjustments and your justification. JSON and CSV exports can feed a vulnerability tracker.