🧮 score

🧮 Scoring · 🟢 stable

Synopsis

cvss score calculates the overall CVSS score from a vector string and prints it with its severity rating. Use --all to surface base/temporal/environmental scores, or --breakdown for a per-metric contribution view. Every mode supports --format json.

How It Works

From a vector string, the command parses and implicitly validates the metrics, hands the result to a calculator, then branches on which score group to report — defaulting to the most specific score actually available.

Usage

cvss score [vector-string] [flags]

Flags

Flag	Type	Default	Description
--all	bool	false	Show all scores (base, temporal, environmental) with severities
--breakdown	bool	false	Show per-metric score breakdown
--format	string	text	Output format: text or json
-h, --help	bool	false	Help for score

Overall score by default

With no flags, the command prints a single overall score and its severity — the environmental score when environmental metrics are present, otherwise the temporal score, otherwise the base score.

Examples

overall score

cvss score "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"

output

10.0 (Critical)

all scores

cvss score --all "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"

output

Base: 10.0 (Critical)

json

cvss score --format json "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"

output

{
  "score": 10,
  "severity": "Critical"
}

Underlying API

Parses the vector with parser.ParseString, wraps it in a cvss.Calculator via cvss.NewCalculator, then calls calc.Calculate() / calc.GetAllScores() / calc.GetScoreBreakdown() depending on the flags.

import (
    "fmt"

    "github.com/scagogogo/cvss-skills/pkg/cvss"
    "github.com/scagogogo/cvss-skills/pkg/parser"
)

cv, err := parser.ParseString("CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H")
if err != nil {
    log.Fatal(err)
}

calc := cvss.NewCalculator(cv)
score, _ := calc.Calculate()
fmt.Printf("%.1f (%s)\n", score, cvss.GetSeverity(score))

// all base / temporal / environmental scores + severities
all, _ := calc.GetAllScores()
fmt.Printf("Base: %.1f (%s)\n", all.BaseScore, all.BaseSeverity)

// per-metric contribution
bd, _ := calc.GetScoreBreakdown()
_ = bd

Related

• severity — map a numeric score to a rating
• subs — impact / exploitability sub-scores
• analyze — how each metric moves the score
• Scoring calculator — Go SDK reference