CVSS Base Score

Attack Vector (AV)

Defines the context of the attack. It measures how close the attacker must be (Network/Remote, Adjacent, Local, or Physical).

Attack Complexity (AC)

Describes the conditions outside the attacker's control that must exist to pull off the exploit (Low or High).

Privileges Required (PR)

Measures the level of access authorization an attacker needs before exploiting the bug (None, Low, or High).

User Interaction (UI)

Captures whether a human user must actively participate in the exploit, such as opening a malicious file (None or Required).

Confidentiality Impact (C)

Measures the level of data disclosure and loss of privacy (None, Low, or High).

Integrity Impact (I)

Measures the level of unauthorized data alteration or corruption (None, Low, or High).

Availability Impact (A)

Measures the level of system downtime or service disruption (None, Low, or High).

Scope (S)

Determines whether a vulnerability in one software component can breach or impact the security boundaries of a completely separate component or system (Unchanged or Changed).