CVE and CVSS lookup
Look up a CVE to see its scores, whether CISA lists it as exploited, and how likely exploitation is. Or score a vulnerability yourself with the CVSS 3.1 calculator.
Look up a CVE
CVSS 3.1 calculator
Base score
9.8Critical
- Impact
- 5.9
- Exploitability
- 3.9
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
This product uses the NVD API but is not endorsed or certified by the NVD.
Where your data goes
This tool needs outside services. What you type stays in your browser until you press Look up. Then your browser sends it to:
NVD, run by the U.S. National Institute of Standards and Technology services.nvd.nist.gov
The CVE ID, to fetch its description, CVSS scores, and CISA's KEV and SSVC fields.
FIRST api.first.org
The CVE ID, to fetch its EPSS score.
Both services also see your IP address and browser details, as with any web request. The CVSS calculator works offline and sends nothing. The CVE ID is also kept in the page address after the # sign so you can share it; that part isn't sent to this site.
This site never receives your lookups and keeps no record of them. Each service handles requests under its own privacy policy.