Skip to main content
3 of 3
edited title; edited title; added 12 characters in body; edited title
Bob Ortiz
  • 7.1k
  • 12
  • 54
  • 104

How to convert risk scores (CVSSv1, CVSSv2, CVSSv3, OWASP Risk Severity)?

Is there an accurate method or formula to convert risk scores between the OWASP Risk Rating Methodology (Overall Risk Severity) and the CVSS v1, v2 and v3 models) base score)?

As well as converting scores between the different CVSS versions? For example convert a CVSSv1 score to a CVSSv3 score or visa versa.

Bob Ortiz
  • 7.1k
  • 12
  • 54
  • 104