{"id":18638528,"url":"https://github.com/anthonyharrison/cvss","last_synced_at":"2025-06-13T10:09:12.953Z","repository":{"id":88986446,"uuid":"255440998","full_name":"anthonyharrison/CVSS","owner":"anthonyharrison","description":"Utilities for manipulating CVSS vulnerability metric","archived":false,"fork":false,"pushed_at":"2020-05-06T15:01:53.000Z","size":25,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-06-13T10:05:19.703Z","etag":null,"topics":["cve","cvss","cvssv3","metrics","security","vulnerability-assessment"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/anthonyharrison.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-04-13T21:02:21.000Z","updated_at":"2020-05-06T15:01:56.000Z","dependencies_parsed_at":"2023-06-13T09:45:24.296Z","dependency_job_id":null,"html_url":"https://github.com/anthonyharrison/CVSS","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/anthonyharrison/CVSS","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anthonyharrison%2FCVSS","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anthonyharrison%2FCVSS/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anthonyharrison%2FCVSS/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anthonyharrison%2FCVSS/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/anthonyharrison","download_url":"https://codeload.github.com/anthonyharrison/CVSS/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/anthonyharrison%2FCVSS/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259624724,"owners_count":22886328,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve","cvss","cvssv3","metrics","security","vulnerability-assessment"],"created_at":"2024-11-07T05:42:19.250Z","updated_at":"2025-06-13T10:09:12.927Z","avatar_url":"https://github.com/anthonyharrison.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CVSS\n\nA utility for reporting and manipulating CVSS v3 metrics\n\nThe motivation for this tool came from looking for a simple command line tool to report the CVSS base score metric for a given CVE and asking the question 'how does that score apply in my environment'. The CVSS V3 specification includes a modify base score string to address this question.\n\nThis utility extracts the CVE vector from NVD JSON record for the CVE.\n\nThis utility only works for CVSS V3. If the CVE record does not have CVSS V3 record an error is returned.\n\nDocumentation of the CVSS v3.1 [specification](https://www.first.org/cvss/v3.1/specification-document).\n\n# Installation\n\nOnly Python 3 is supported.\n\n```\npip -r requirements.txt\n```\n\n# Usage\n\n```\n python CVSS.py [-h] [-C CVE] [-m MOD_VECTOR] [-b] [-e] [-i] [-s] [-V] [-v]\n```\n\n```\n Arguments:\n   -h, --help            show this help message and exit\n   -C CVE, --CVE CVE     CVE Identity\n   -m MOD_VECTOR, --modify MOD_VECTOR\n                         Modified CVSS Base Metric string (e.g. MAV:L/MC:H)\n   -b, --base            Report base score (default)\n   -e, --exploit         Report exploit score\n   -i, --impact          Report impact score\n   -s, --string          Report CVSS Vector String\n   -V, --verbose         Verbose reporting\n   -v, --version         Show version information and exit\n```\n\nApart from -C option all arguments are optional.\n\n# Examples\n\n```\npython CVSS.py -C CVE-2020-0001\n```\n\nReturns the CVE base score\n\n```\npython CVSS.py -C CVE-2020-0001 -V\n```\n\nVerbose reporting of the CVE base score\n\n```\npython CVSS.py -C CVE-2020-0001 -i -e\n```\n\nReturns the CVE base, impact and exploitability scores\n\n```\npython CVSS.py -C CVE-2020-0001 -m \"MAV:L/MC:H\"\n```\n\nReport the modified CVE base score  \n\n# Error Messages\n\n[ERROR] CVE parameter not specified.\n\nThe -C parameter was not specified\n\n[ERROR] No CVE record for \u003cCVE\u003e found\n\nThe specified CVE does not exist\n\n[ERROR] No CVSSv3 data for \u003cCVE\u003e\n\nA CVSSv3 record was not found for the specified CVE although there may be a CVSSv2 record.\n\nERROR] Invalid JSON received for CVE \u003cCVE\u003e\n\nThe NVD JSON record for CVE was not valid\n\n[ERROR] Discrepancy between base score calculations for CVE \u003cCVE\u003e\n\nInternal error\n\n# Information Messages\n\nVarious information messages are produced when Verbose mode is selected\n\n# Licence\n\n[MIT Licence](https://opensource.org/licenses/MIT)\n\nReferenced components may be released under different licences.\n\n# Extra\n\nThe 'docs' directory contains the base score calculation for all of the CVSS V3 base score strings (all 2592 combinations).\n\n# Postscript\n\n This was a simple exercise to get experience in publishing a utility on GitHub in the hope that it might be useful to someone. I know that there are much better ways of writing the code but hopefully the code is clear if anyone wants to take it to the next stage.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanthonyharrison%2Fcvss","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fanthonyharrison%2Fcvss","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fanthonyharrison%2Fcvss/lists"}