Skip to main content

⚠️ All scoring examples use publicly available CVE data from NVD, FIRST.org, and CISA KEV. Always validate scores against your own environment.

CVSS v4.0 Field GuideGuide

CVSS v4.0 Field Guide
Introduction: CVSS Is a Tool, Not a Score
v3.1 vs v4.0: Side-by-Side Comparison
Anatomy of a CVSS v4.0 Vector String
The CVSS Scoring Lifecycle
Threat & Environmental Metrics
Worked Examples: Real CVEs
Industry-Specific Scoring
CVSS vs SSVC: When to Use Which
The Practical VM Workflow
CVSS v4.0 Enrichment Tool
CVSS as Evidence for Regulatory Vulnerability Management
The 8 Most Common CVSS Mistakes
Quick Reference Cheatsheet

CVSS v4.0 Field Guide

CVSS v4.0: The Practical Field Guide

Navigate the guide using the sidebar. Start with the Introduction.

Introduction: CVSS Is a Tool, Not a Score

Guide

Introduction
Vector String
Worked Examples
Cheatsheet

Author

Medium
LinkedIn
GitHub

Resources

FIRST.org CVSS Calculator
CISA KEV Catalog
EPSS

© 2026 Andrey Pautov · ☕ Buy me a coffee