The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.

NAME

CVSS::v4 - Parse and calculate CVSS v4.0 scores

DESCRIPTION

METHODS

CVSS::v4 inherits all methods from CVSS::Base and implements the following new ones.

$cvss->macro_vector

Calculate the macro vector.

$cvss->exploitability

Return the Exploitability severity.

$cvss->complexity

Return the Complexity severity.

$cvss->vulnerable_system

Return the Vulnerable System severity.

$cvss->subsequent_system

Return the Subsequent System severity.

$cvss->exploitation

Return the Exploitation severity.

$cvss->security_requirements

Return the Security Requirements severity.

BASE METRICS

$cvss->AV | $cvss->attackVector
$cvss->AC | $cvss->attackComplexity
$cvss->AT | $cvss->attackRequirements
$cvss->PR | $cvss->privilegesRequired
$cvss->UI | $cvss->userInteraction
$cvss->VC | $cvss->vulnConfidentialityImpact
$cvss->VI | $cvss->vulnIntegrityImpact
$cvss->VA | $cvss->vulnAvailabilityImpact
$cvss->SC | $cvss->subConfidentialityImpact
$cvss->SI | $cvss->subIntegrityImpact
$cvss->SA | $cvss->subAvailabilityImpact

THREAT METRICS

$cvss->E | $cvss->exploitMaturity

ENVIRONMENTAL METRICS

$cvss->CR | $cvss->confidentialityRequirement
$cvss->IR | $cvss->integrityRequirement
$cvss->AR | $cvss->availabilityRequirement
$cvss->MAV | $cvss->modifiedAttackVector
$cvss->MAC | $cvss->modifiedAttackComplexity
$cvss->MAT | $cvss->modifiedAttackRequirements
$cvss->MPR | $cvss->modifiedPrivilegesRequired
$cvss->MUI | $cvss->modifiedUserInteraction
$cvss->MVC | $cvss->modifiedVulnConfidentialityImpact
$cvss->MVI | $cvss->modifiedVulnIntegrityImpact
$cvss->MVA | $cvss->modifiedVulnAvailabilityImpact
$cvss->MSC | $cvss->modifiedSubConfidentialityImpact
$cvss->MSI | $cvss->modifiedSubIntegrityImpact
$cvss->MSA | $cvss->modifiedSubAvailabilityImpact

SUPPLEMENTAL METRICS

$cvss->S | $cvss->Safety
$cvss->AU | $cvss->Automatable
$cvss->R | $cvss->Recovery
$cvss->V | $cvss->valueDensity
$cvss->RE | $cvss->vulnerabilityResponseEffort
$cvss->U | $cvss->providerUrgency

SEE ALSO

CVSS, CVSS::v2, CVSS::v3

[FIRST] CVSS Data Representations (https://www.first.org/cvss/data-representations)
[FIRST] CVSS v4.0 Specification (https://www.first.org/cvss/v4.0/specification-document)

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-CVSS/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-CVSS

    git clone https://github.com/giterlizzi/perl-CVSS.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2023-2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.