Uploaded June 2025 | Updated September 2026, 4 hours ago
CVSS. Everyone loves to hate it, but how many people really use it correctly? Tib3rius explains CVSS v3.1 and how to calculate a CVSS score using the NIST calculator!
0:00 Introduction
2:19 CVSS Explained
24:10 Outro
Corrections:
1. At 6:33 I said that "Attack Vector: Network" meant connected to the Internet. This should have been an example, not presented as the only meaning. As the tooltip in the calculator explains, "Network" means the attacker is one or more network hops away.
2. At 11:58 while explaining "Scope: Unchanged", I used the example of XSS. This might not be the best example to use, as one could argue that the victim's browser is ultimately "exploited" via the web application, so that could count as "Scope: Changed".
Edited by @JakeP726 & @HackerCatProductions
https://x.com/hackercatprod
hackercatproductions.com
X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius
CVSS. Everyone loves to hate it, but how many people really use it correctly? Tib3rius explains CVSS v3.1 and how to calculate a CVSS score using the NIST calculator!
0:00 Introduction
2:19 CVSS Explained
24:10 Outro
Corrections:
1. At 6:33 I said that "Attack Vector: Network" meant connected to the Internet. This should have been an example, not presented as the only meaning. As the tooltip in the calculator explains, "Network" means the attacker is one or more network hops away.
2. At 11:58 while explaining "Scope: Unchanged", I used the example of XSS. This might not be the best example to use, as one could argue that the victim's browser is ultimately "exploited" via the web application, so that could count as "Scope: Changed".
Edited by @JakeP726 & @HackerCatProductions
https://x.com/hackercatprod
hackercatproductions.com
X: https://x.com/0xTib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social
Twitch: twitch.tv/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
LinkedIn: linkedin.com/in/tib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Instagram: instagram.com/0xtib3rius
Threads: threads.net/@0xtib3rius
Facebook: facebook.com/0xTib3rius
