Work out cvss environmental score instantly with clear inputs, formula shown and shareable results.
Environmental metrics re-weight impact by what your organisation actually cares about for a given asset. A vulnerability that only affects availability scores much lower on a batch reporting server than on a payment gateway. Because the requirement weights range from 0.5 to 1.5, the environmental score can rise above the base as well as fall below it — the only CVSS group that can.
Environmental adjustment
weights: High 1.5, Medium 1.0, Low 0.5; environmental = roundup(min(10, score x average of CR, IR, AR))
It requires asset-level knowledge that vulnerability scanners do not have. Populating it is exactly what turns a generic CVSS feed into a prioritised work queue.
Yes, when the security requirements are High. That is deliberate: a medium-severity flaw on a crown-jewel system can be more urgent than a high-severity one elsewhere.