CVSS 3.1 Vector Scorer avatar

CVSS 3.1 Vector Scorer

Pricing

$1.00 / 1,000 results

Go to Apify Store
CVSS 3.1 Vector Scorer

CVSS 3.1 Vector Scorer

Deterministic CVSS 3.1 base-score calculator. Parses one or many CVSS:3.1 vector strings and returns the base score and severity rating per the official CVSS 3.1 specification. Pure code, no AI, no external API.

Pricing

$1.00 / 1,000 results

Rating

0.0

(0)

Developer

Ahmed Moussa

Ahmed Moussa

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

a month ago

Last modified

Categories

Share

Deterministic CVSS 3.1 base-score calculator as an Apify actor.

What it does

Give it one or many CVSS:3.1/... vector strings; it returns the base score (0.0-10.0) and the severity rating (None / Low / Medium / High / Critical) computed by the official CVSS 3.1 formula.

  • Pure code — no AI, no external API, no database. Same input always yields the same output.
  • Zero idle cost — the actor only runs (and only computes) when you invoke it.

Input

{
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"vectors": [
"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N"
]
}
FieldTypeDescription
vectorstringA single CVSS 3.1 vector string.
vectorsarrayOptional list of additional vectors (scored in addition to vector).

Output (one dataset item per vector)

{
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"valid": true,
"base_score": 9.8,
"severity": "Critical",
"metrics": { "attack_vector": "N", "...": "..." }
}

Invalid vector strings return {"valid": false, "error": "..."} rather than failing the run.

Use cases

  • Batch-score CVSS vectors from a vulnerability scanner or advisory feed.
  • Add a deterministic, auditable CVSS base-score step to a security pipeline.
  • Validate / normalize CVSS 3.1 vector strings and get their severity bucket.

How it works (deterministic, code-only)

The vector string is parsed into its base metrics (AV, AC, PR, UI, S, C, I, A) and the official CVSS 3.1 base-score equations are applied in pure code. There is no AI, no network call and no state — the same vector always returns the same score.

Limitations (honest)

  • Computes the base score only (no Temporal or Environmental metrics).
  • CVSS 3.1 vectors only; other versions return {"valid": false}.
  • Invalid vectors are reported per-item, never crashing the whole run.