Security::CVSS 0.3

Security::CVSS is a Perl module to calculate CVSS values (Common Vulnerability Scoring System).

SYNOPSIS

use Security::CVSS;

my $CVSS = new Security::CVSS;

$CVSS->AccessVector(Local);
$CVSS->AccessComplexity(High);
$CVSS->Authentication(Not-Required);
$CVSS->ConfidentialityImpact(Complete);
$CVSS->IntegrityImpact(Complete);
$CVSS->AvailabilityImpact(Complete);
$CVSS->ImpactBias(Normal);

my $BaseScore = $CVSS->BaseScore();

$CVSS->Exploitability(Proof-Of-Concept);
$CVSS->RemediationLevel(Official-Fix);
$CVSS->ReportConfidence(Confirmed);

my $TemporalScore = $CVSS->TemporalScore()

$CVSS->CollateralDamagePotential(None);
$CVSS->TargetDistribution(None);

my $EnvironmentalScore = $CVSS->EnvironmentalScore();

my $CVSS = new CVSS({AccessVector => Local,
AccessComplexity => High,
Authentication => Not-Required,
ConfidentialityImpact => Complete,
IntegrityImpact => Complete,
AvailabilityImpact => Complete,
ImpactBias => Normal
});

my $BaseScore = $CVSS->BaseScore();

$CVSS->UpdateFromHash({AccessVector => Remote,
AccessComplexity => Low);

my $NewBaseScore = $CVSS->BaseScore();

$CVSS->Vector((AV:L/AC:H/Au:NR/C:N/I:P/A:C/B:C));
my $BaseScore = $CVSS->BaseScore();
my $Vector = $CVSS->Vector();

CVSS allows you to calculate all three types of score described under the CVSS system: Base, Temporal and Environmental.

You can modify any parameter via its accessor and recalculate at any time.
The temporal score depends on the base score, and the environmental score depends on the temporal score. Therefore you must remember to supply all necessary parameters.