CVSSv3 Support?

Is there any way to use the CVSSv3 scoring system instead of CVSSv2?

Currently using OpenVAS 9.0.0-2739 from the Atomic repo.
If not will it be included in GVM-10?

1 Like

Those tweets might be relevant for your question:

It’s on our list

It’s not scheduled yet. But it seems it gets more import in the next months.

CVSSv3 has some compatibility issues when involved in larger setups where auditing and correlations are vital. We are working on those aspects, as we would like to be backward compatible as much as possible. That’s why we don’t have an ETA yet.

1 Like

Anything new on the topic?

Same question. Any update on this ?


We are currently working on support for CVSSv3 and it will be part of GOS and GVM 21.04. That doesn’t mean all VTs will use CVSSv3 but it will be possible technically and the whole GVM stack will support different sources/kinds of severity scores.