CVSSCalculator

Details

ID	`CVSSCalculator`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10404775`

README

This script calculates the CVSS Base Score, Temporal Score, and Environmental Score using either the CVSS 3.0 or CVSS 3.1 calculator according to https://www.first.org/cvss/ calculation documentation.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	5.0.0

Inputs

Argument Name	Description
version	The CVSS version to use for scoring. Can be “3.1” or “3.0”. Default is “3.1”.
AV	Attack Vector. Can be “N”, “A”, “L”, or “P”.
AC	Attack Complexity. Can be “L” or “H”.
PR	Privileges Required. Can be “N”, “L”, or “H”.
UI	User Interaction. Can be “N” or “R”.
S	Scope. Can be “U” or “C”.
C	Confidentiality. Can be “H”, “L”, or “N”.
I	Integrity. Can be “H”, “L”, or “N”.
A	Availability. Can be “H”, “L”, or “N”.
E	Exploit Code Maturity. Can be “X”, “H”, “F”, “P”, or “U”. Default is “X”.
RL	Remediation Level. Can be “X”, “U”, “W”, “T”, or “O”. Default is “X”.
RC	Report Confidence. Can be “X”, “C”, “R”, or “U”. Default is “X”.
CR	Confidentiality Requirement. Can be “X”, “H”, “M”, or “L”. Default is “X”.
IR	Integrity Requirement. Can be “X”, “H”, “M”, or “L”. Default is “X”.
AR	Availability Requirement. Can be “X”, “H”, “M”, or “L”. Default is “X”.
MAV	Modified Attack Vector. Can be “X”, “N”, “A”, “L”, or “P”. Default is “X”.
MAC	Modified Attack Complexity. Can be “X”, “L”, or “N”. Default is “X”.
MPR	Modified Privileges Required. Can be “X”, “N”, “L”, or “H”. Default is “X”.
MUI	Modified User Interaction. Can be “X”, “N”, or “R”. Default is “X”.
MS	Modified Scope. Can be “X”, “U”, or “C”. Default is “X”.
MC	Modified Confidentiality. Can be “X”, “N”, “L”, or “H”. Default is “X”.
MI	Modified Integrity. Can be “X”, “N”, “L”, or “H”. Default is “X”.
MA	Modified Availability. Can be “X”, “N”, “L”, or “H”. Default is “X”.

Outputs

Path	Description	Type
CVSS.VectorString	Text notation of the score.	string
CVSS.ImpactSubScore	Impact sub-score.	number
CVSS.Impact	Impact Score.	number
CVSS.Exploitability	Exploitability score.	number
CVSS.BaseScore	Base score.	number
CVSS.TemporalScore	Temporal score.	number
CVSS.ModifiedImpactSubScore	Modified impact sub-score.	number
CVSS.ModifiedImpact	Modified impact.	number
CVSS.ModifiedExploitability	Modified exploitability score.	number
CVSS.EnvironmentalScore	Environmental score.	number
CVSS.Version	Version of CVSS used in the calculation.	number

Source

CVSSCalculator.py CVSSCalculator.yml CVSSCalculator_description.md

Download History Raw

commonfields:
  id: CVSSCalculator
  version: -1
name: CVSSCalculator
script: '-'
type: python
tags: []
comment: This script calculates the CVSS Base Score, Temporal Score, and Environmental Score using either the CVSS 3.0 or CVSS 3.1 calculator according to https://www.first.org/cvss/ calculation documentation.
enabled: true
args:
- name: version
  required: true
  default: true
  auto: PREDEFINED
  predefined:
  - "3.1"
  - "3.0"
  description: The CVSS version to use for scoring. Can be "3.1" or "3.0". Default is "3.1".
  defaultValue: "3.1"
- name: AV
  required: true
  auto: PREDEFINED
  predefined:
  - "N"
  - A
  - L
  - P
  description: Attack Vector. Can be "N", "A", "L", or "P".
- name: AC
  required: true
  auto: PREDEFINED
  predefined:
  - L
  - H
  description: Attack Complexity. Can be "L" or "H".
- name: PR
  required: true
  auto: PREDEFINED
  predefined:
  - "N"
  - L
  - H
  description: Privileges Required. Can be "N", "L", or "H".
- name: UI
  required: true
  auto: PREDEFINED
  predefined:
  - "N"
  - R
  description: User Interaction. Can be "N" or "R".
- name: S
  required: true
  auto: PREDEFINED
  predefined:
  - U
  - C
  description: Scope. Can be "U" or "C".
- name: C
  required: true
  auto: PREDEFINED
  predefined:
  - H
  - L
  - "N"
  description: Confidentiality. Can be "H", "L", or "N".
- name: I
  required: true
  auto: PREDEFINED
  predefined:
  - H
  - L
  - "N"
  description: Integrity. Can be "H", "L", or "N".
- name: A
  required: true
  auto: PREDEFINED
  predefined:
  - H
  - L
  - "N"
  description: Availability. Can be "H", "L", or "N".
- name: E
  auto: PREDEFINED
  predefined:
  - X
  - H
  - F
  - P
  - U
  description: Exploit Code Maturity. Can be "X", "H", "F", "P", or "U". Default is "X".
  defaultValue: X
- name: RL
  auto: PREDEFINED
  predefined:
  - X
  - U
  - W
  - T
  - O
  description: Remediation Level. Can be "X", "U", "W", "T", or "O". Default is "X".
  defaultValue: X
- name: RC
  auto: PREDEFINED
  predefined:
  - X
  - C
  - R
  - U
  description: Report Confidence. Can be "X", "C", "R", or "U". Default is "X".
  defaultValue: X
- name: CR
  auto: PREDEFINED
  predefined:
  - X
  - H
  - M
  - L
  description: Confidentiality Requirement. Can be "X", "H", "M", or "L". Default is "X".
  defaultValue: X
- name: IR
  auto: PREDEFINED
  predefined:
  - X
  - H
  - M
  - L
  description: Integrity Requirement. Can be "X", "H", "M", or "L". Default is "X".
  defaultValue: X
- name: AR
  auto: PREDEFINED
  predefined:
  - X
  - H
  - M
  - L
  description: Availability Requirement. Can be "X", "H", "M", or "L". Default is "X".
  defaultValue: X
- name: MAV
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - A
  - L
  - P
  description: Modified Attack Vector. Can be "X", "N", "A", "L", or "P". Default is "X".
  defaultValue: X
- name: MAC
  auto: PREDEFINED
  predefined:
  - X
  - L
  - H
  description: Modified Attack Complexity. Can be "X", "L", or "N". Default is "X".
  defaultValue: X
- name: MPR
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - L
  - H
  description: Modified Privileges Required. Can be "X", "N", "L", or "H". Default is "X".
  defaultValue: X
- name: MUI
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - R
  description: Modified User Interaction. Can be "X", "N", or "R". Default is "X".
  defaultValue: X
- name: MS
  auto: PREDEFINED
  predefined:
  - X
  - U
  - C
  description: Modified Scope. Can be "X", "U", or "C". Default is "X".
  defaultValue: X
- name: MC
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - L
  - H
  description: Modified Confidentiality. Can be "X", "N", "L", or "H". Default is "X".
  defaultValue: X
- name: MI
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - L
  - H
  description: Modified Integrity. Can be "X", "N", "L", or "H". Default is "X".
  defaultValue: X
- name: MA
  auto: PREDEFINED
  predefined:
  - X
  - "N"
  - L
  - H
  description: Modified Availability. Can be "X", "N", "L", or "H". Default is "X".
  defaultValue: X
outputs:
- contextPath: CVSS.VectorString
  description: Text notation of the score.
  type: string
- contextPath: CVSS.ImpactSubScore
  description: Impact sub-score.
  type: number
- contextPath: CVSS.Impact
  description: Impact Score.
  type: number
- contextPath: CVSS.Exploitability
  description: Exploitability score.
  type: number
- contextPath: CVSS.BaseScore
  description: Base score.
  type: number
- contextPath: CVSS.TemporalScore
  description: Temporal score.
  type: number
- contextPath: CVSS.ModifiedImpactSubScore
  description: Modified impact sub-score.
  type: number
- contextPath: CVSS.ModifiedImpact
  description: Modified impact.
  type: number
- contextPath: CVSS.ModifiedExploitability
  description: Modified exploitability score.
  type: number
- contextPath: CVSS.EnvironmentalScore
  description: Environmental score.
  type: number
- contextPath: CVSS.Version
  description: Version of CVSS used in the calculation.
  type: number
subtype: python3
dockerimage: demisto/python3:3.12.13.10404775
fromversion: 5.0.0
tests:
- No tests