vFeed Integrates Next-Generation CVSS 4.0 Risk Scoring

Exciting news for threat intelligence users! vFeed is thrilled to announce the integration of Common Vulnerability Scoring System version 4.0 (CVSS4) risk scoring metrics into our comprehensive threat intelligence feed. By gathering and correlating data directly from NVD metrics, vFeed now provides the latest CVSS 4.0 (cvssMetricV40) scores, the current industry standard. This enhancement ensures effortless lookup of up-to-date risk assessments across CVEs that support CVSS4 scoring. Our earlier CVSS 2/3 scoring metrics continue to stay updated.

CVSS version 4.0 standard was released in November 2023, and introduces several significant improvements over predecessors CVSS 2/3 scoring for risk analysis and attack complexity. Some of the key updates include the following.

  • Refined Attack Complexity: The previous “low” and “high” Attack Complexity (AC) are now separated into distinct “Attack Complexity” (AC) and “Attack Requirements” (AT) metrics, offering a more granular understanding of exploitability.
  • Enhanced User Interaction: The User Interaction metric now distinguishes between “active” (requiring explicit user action) and “passive” (where exploitation can occur indirectly, like visiting a malicious site) scenarios.
  • Introducing Safety Impact: A crucial new “Safety” metric captures the potential impact on human life, financial stability, and organizational operations.
  • Expanded Granularity with Modified Metrics: CVSS 4.0 introduces a range of “modified” parameters for attack vectors and Confidentiality, Integrity, and Availability (CIA) impacts, allowing for more precise and adaptable risk quantification.

vFeed’s integration includes all CVSS 4.0 fields as published and populated by the NVD, encompassing Base, Threat, Environmental, and Supplemental Metrics.

For a detailed understanding of CVSS 4.0, one can consult the official specification document from Forum of Incident Response and Security Teams (FIRST), a leading non-profit organization dedicated to supporting global computer security incident response located in the link below.

https://www.first.org/cvss/v4-0/specification-document

You can also explore the NVD’s CVSS 4.0 calculator here:

https://nvd.nist.gov/vuln-metrics/cvss/v4-calculator

Click here to schedule your demo with vFeed Threat Intel today!