https://github.com/wojwozniak/cvss_converter

Function converting from CVSS 3.1 to CVSS 4.0
https://github.com/wojwozniak/cvss_converter

cvss cvssv3

Last synced: 2 months ago
JSON representation

Function converting from CVSS 3.1 to CVSS 4.0

• Host: GitHub
• URL: https://github.com/wojwozniak/cvss_converter
• Owner: wojwozniak
• Created: 2024-04-18T14:10:30.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-07-18T19:44:16.000Z (over 1 year ago)
• Last Synced: 2024-07-19T02:32:21.568Z (over 1 year ago)
• Topics: cvss, cvssv3
• Language: Jupyter Notebook
• Homepage:
• Size: 4.5 MB
• Stars: 2
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# Funkcja konwertująca z CVSS 3.1 na CVSS 4.0

## Differences between CVSS 3.1 and CVSS 4:

### Retired base metric: SCOPE (S)

Vulnerable System Impact into Confidentiality (VC), Integrity (VI), Availability (VA)   

Subsequent System(s) Impact into Confidentiality (SC), Integrity (SI), Availability (SA)  

### Update to the base metric (UI):

CVSS v4.0 proposes the User Interaction (UI) metric to be more granular. CVSS v3.1 the User Interaction (UI) metric had values None(N) or Required(R). With CVSS v4.0 this metric now provides more granularity to the amount of interaction required as Passive (P) or Active (A).

Table of values (8.2):

https://www.first.org/cvss/v4.0/specification-document

![alt text](https://github.com/wojwozniak/cvss_converter/blob/main/data/differencesBetweenCVSS3%264.png?raw=true)