Is there an accurate method or formula to convert risk scores between the OWASP Risk Rating Methodology (Overall Risk Severity) and the CVSS v1, v2 and v3 models) base score)?
As well as converting scores between the different CVSS versions? For example convert a CVSSv1 score to a CVSSv3 score or visa versa.