NAME

CVSS::v3 - Parse and calculate CVSS v3 scores

SYNOPSIS

use CVSS::v3;
my $cvss = CVSS::v3->from_vector_string('CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H');

say $cvss->AV; # A
say $cvss->attackVector; # ADJACENT_NETWORK

DESCRIPTION

METHODS

CVSS::v3 inherits all methods from CVSS::Base and implements the following new ones.

SCORES

$cvss->temporal_score

Return the temporal score (0 - 10).

$cvss->temporal_severity

Return the temporal severity (LOW, MEDIUM, HIGH or CRITICAL).

$cvss->environmental_score

Return the environmental score (0 - 10).

$cvss->environmental_severity

Return the environmental severity (LOW, MEDIUM, HIGH or CRITICAL).

BASE METRICS

$cvss->AV | $cvss->attackVector

$cvss->AC | $cvss->attackComplexity

$cvss->PR | $cvss->privilegesRequired

$cvss->UI | $cvss->userInteraction

$cvss->S | $cvss->scope

$cvss->C | $cvss->confidentialityImpact

$cvss->I | $cvss->integrityImpact

$cvss->A | $cvss->availabilityImpact

TEMPORAL METRICS

$cvss->E | $cvss->exploitCodeMaturity

$cvss->RL | $cvss->remediationLevel

$cvss->RC | $cvss->reportConfidence

ENVIROMENTAL METRICS

$cvss->CR | $cvss->confidentialityRequirement

$cvss->IR | $cvss->integrityRequirement

$cvss->AR | $cvss->availabilityRequirement

$cvss->MAV | $cvss->modifiedAttackVector

$cvss->MAC | $cvss->modifiedAttackComplexity

$cvss->MPR | $cvss->modifiedPrivilegesRequired

$cvss->MUI | $cvss->modifiedUserInteraction

$cvss->MS | $cvss->modifiedScope

$cvss->MC | $cvss->modifiedConfidentialityImpact

$cvss->MI | $cvss->modifiedIntegrityImpact

$cvss->MA | $cvss->modifiedAvailabilityImpact

SEE ALSO

CVSS, CVSS::v2, CVSS::v4

[FIRST] CVSS Data Representations (https://www.first.org/cvss/data-representations)

[FIRST] CVSS v3.1 Specification (https://www.first.org/cvss/v3.1/specification-document)

[FIRST] CVSS v3.0 Specification (https://www.first.org/cvss/v3.0/specification-document)

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-CVSS/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-CVSS

git clone https://github.com/giterlizzi/perl-CVSS.git

AUTHOR

• Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2023-2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.