moheshmohan / cvssv3_Excel

Just a small demo of CVSS V3.0 Scoring in an excel spreadsheet

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Environment calculations are not calculating correctly

jay1891 opened this issue · comments

Hi,

First off all thanks for making this Excel!

I noticed there are calculation errors with the environment related values. I therefor updated the excel to correct them and validated it with https://www.first.org/cvss/calculator/3.0

  • I also added the calculation of an actual Risk score based on

Risk = ((CVSS severity) + (criticality * 2) + (likelihood * 2) + (impact * 2) ) / 4

Information about the Risk score can be found at https://www.packtpub.com/free-ebook/industrial-cybersecurity/9781788395151

  • added a risk acceptance matrix.

  • updated excel CVSS.xlsx