Work out cvss temporal score instantly with clear inputs, formula shown and shareable results.
Temporal metrics adjust the base score for how the threat has evolved: whether working exploit code exists, whether a fix is available, and how confident the report is. All three multipliers are at most 1.0, so the temporal score can only reduce the base — never increase it — and the largest single reduction available is about 9 percent for an unproven exploit.
CVSS temporal score
temporal = roundup(base x exploit maturity x remediation level x report confidence)
Every temporal multiplier is capped at 1.0 by design. The base is meant to represent the worst case, with temporal metrics reflecting mitigating real-world facts.
v4 renames the group to Threat metrics and keeps only exploit maturity, dropping remediation level and report confidence.