NAME

CVSS::v2 - Parse and calculate CVSS v2.0 scores

SYNOPSIS

use CVSS::v2;
my $cvss = CVSS::v2->from_vector_string('AV:N/AC:L/Au:N/C:N/I:N/A:C');

say $cvss->AV; # N
say $cvss->accessVector; # NETWORK

DESCRIPTION

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental. Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time. The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities.

https://www.first.org/cvss/v2/guide

METHODS

CVSS::v2 inherits all methods from CVSS::Base and implements the following new ones.

$cvss-weight ( $metric )

Return the weight of provided metric.

$cvss->W ( $metric )

Alias of weight.

BASE METRICS

$cvss->AV | $cvss->accessVector
$cvss->AC | $cvss->accessComplexity
$cvss->Au | $cvss->authentication
$cvss->C | $cvss->confidentialityImpact
$cvss->I | $cvss->integrityImpact
$cvss->A | $cvss->availabilityImpact

TEMPORAL METRICS

$cvss->E | $cvss->exploitability
$cvss->RL | $cvss->remediationLevel
$cvss->RC | $cvss->reportConfidence

ENVIRONMENTAL METRICS

$cvss->CDP | $cvss->collateralDamagePotential
$cvss->TD | $cvss->targetDistribution
$cvss->CR | $cvss->confidentialityRequirement
$cvss->IR | $cvss->integrityRequirement
$cvss->AR | $cvss->availabilityRequirement

SEE ALSO

CVSS, CVSS::v3, CVSS::v4

[FIRST] CVSS Data Representations (https://www.first.org/cvss/data-representations)
[FIRST] CVSS v2.0 Complete Guide (https://www.first.org/cvss/v2/guide)

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-CVSS/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-CVSS

git clone https://github.com/giterlizzi/perl-CVSS.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2023-2026 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.