Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 7435

The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems

Date Published: August 2007


Peter Mell (NIST), Karen Scarfone (NIST), Sasha Romanosky (CMU)



Common Vulnerability Scoring System; CVSS; National Vulnerability Database; NVD; security metrics; vulnerability scoring
Control Families

Configuration Management


Download URL

Supplemental Material:
None available

Related NIST Publications:
FIPS 199

Document History:
08/30/07: IR 7435 (Final)