Skip to content
ENExplore Calculators

CVSS Temporal Score Calculator

Work out cvss temporal score instantly with clear inputs, formula shown and shareable results.

About CVSS Temporal Score Calculator

Temporal metrics adjust the base score for how the threat has evolved: whether working exploit code exists, whether a fix is available, and how confident the report is. All three multipliers are at most 1.0, so the temporal score can only reduce the base — never increase it — and the largest single reduction available is about 9 percent for an unproven exploit.

Formula

CVSS temporal score

temporal = roundup(base x exploit maturity x remediation level x report confidence)

Worked example

With the default values below, CVSS Temporal Score Calculator returns CVSS temporal score of 9.1. Change any input above and every figure here is recalculated in your browser.

Inputs used

CVSS base scoreaccepts 0.1–10
9.8
Exploit code maturityone of Not defined (1.0), High - widely available (1.0), Functional exploit (0.97), Proof of concept (0.94), Unproven (0.91)
Functional exploit (0.97)
Remediation levelone of Not defined (1.0), Unavailable (1.0), Workaround (0.97), Temporary fix (0.96), Official fix (0.95)
Official fix (0.95)
Report confidenceone of Confirmed (1.0), Reasonable (0.96), Unknown (0.92)
Confirmed (1.0)

Results

CVSS temporal score
9.1
Combined temporal multiplier
0.9215
Reduction from the base score
0.70
Qualitative severity
Critical

Step by step

  1. 1Values used
  2. 2CVSS temporal score
  3. 3CVSS temporal score= 9.1
  4. 4Combined temporal multiplier= 0.9215
  5. 5Reduction from the base score= 0.70
  6. 6Qualitative severity= Critical

Assumptions and limits

  • The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
  • In particular, this calculator does not take inflation, tax, fees or charges or compounding frequency into account.
  • Figures are rounded for display to 4 decimal places, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

Why can the temporal score never exceed the base?

Every temporal multiplier is capped at 1.0 by design. The base is meant to represent the worst case, with temporal metrics reflecting mitigating real-world facts.

Is this still called temporal in CVSS v4?

v4 renames the group to Threat metrics and keeps only exploit maturity, dropping remediation level and report confidence.

Related Calculators

CVSS Temporal Score Calculator | Calcrivo