thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

CVSS v4.0

The 2023 version of CVSS that adds Attack Requirements, splits impact into vulnerable and subsequent systems and renames Temporal to Threat metrics.

Definition

CVSS 4.0 introduces the Attack Requirements (AT) metric, replaces Scope with separate impacts on the vulnerable system (VC, VI, VA) and subsequent systems (SC, SI, SA), refines User Interaction into None, Passive and Active, and adds Supplemental metrics such as Automatable and Recovery. Nomenclature such as CVSS-B, CVSS-BT and CVSS-BTE indicates which metric groups were used.

Example

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Exam tip

v4.0 removes Scope and Temporal; know CVSS-B means base score only.

Related terms