CvssSuite

https://www.nuget.org/packages/CvssSuite
Admin
CvssSuite is a .NET NuGet package that processes Common Vulnerability Scoring System (CVSS) vectors...
Tokens:4,941
Snippets:44
Trust Score:9.5
Update:5 months ago
Show doc for...
Tokens:
Raw
### Install CvssSuite via Package Manager Console (Simple)

Source: https://www.nuget.org/packages/CvssSuite

A simplified command for installing the CvssSuite package via the Package Manager Console.

```powershell
Install-Package CvssSuite
```

--------------------------------

### Install CvssSuite as a Cake Tool

Source: https://www.nuget.org/packages/CvssSuite

Use this directive to install CvssSuite as a tool within Cake scripts.

```powershell
#tool nuget:?package=CvssSuite&version=1.1.0
```

--------------------------------

### Install CvssSuite via Package Manager Console

Source: https://www.nuget.org/packages/CvssSuite

This command is intended for use within the Package Manager Console in Visual Studio.

```powershell
NuGet\Install-Package CvssSuite -Version 1.1.0
```

--------------------------------

### Install CvssSuite as a Cake Addin

Source: https://www.nuget.org/packages/CvssSuite

Use this directive to install CvssSuite as an addin within Cake scripts.

```powershell
#addin nuget:?package=CvssSuite&version=1.1.0
```

--------------------------------

### Add CvssSuite via .NET CLI (Simple)

Source: https://www.nuget.org/packages/CvssSuite

A simplified command for adding the CvssSuite package using the .NET Core command line tools.

```bash
dotnet add package CvssSuite
```

--------------------------------

### Add CvssSuite via Paket CLI

Source: https://www.nuget.org/packages/CvssSuite

Use this command to add the CvssSuite package when using the Paket CLI.

```bash
paket add CvssSuite --version 1.1.0
```

--------------------------------

### Reference CvssSuite in Project File (CPM)

Source: https://www.nuget.org/packages/CvssSuite

For projects supporting Central Package Management (CPM), add this XML node to your project file.

```xml
<PackageReference Include="CvssSuite" />
```

--------------------------------

### Version CvssSuite with Central Package Management

Source: https://www.nuget.org/packages/CvssSuite

For projects supporting Central Package Management (CPM), add this XML node to your solution's Directory.Packages.props file.

```xml
<PackageVersion Include="CvssSuite" Version="1.1.0" />
```

--------------------------------

### Add CvssSuite via .NET CLI

Source: https://www.nuget.org/packages/CvssSuite

Use this command to add the CvssSuite package to your project using the .NET Core command line tools.

```bash
dotnet add package CvssSuite --version 1.1.0
```

--------------------------------

### Create and Analyze CVSS Vectors

Source: https://www.nuget.org/packages/CvssSuite/1.1.0

Demonstrates creating CVSS objects for different versions (v4.0, v3.0, v3.1, v2) and accessing their properties like vector string, version, validity, severity, and score. Note that TemporalScore() for v4.0 throws a NotSupportedException.

```csharp
using System;
using Cvss.Suite;

namespace CvssSuiteNugetPackageTest
{
    class Program
    {
        static void Main(string[] args)
        {
            var cvss_v40 = CvssSuite.Create("CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:M/IR:H/AR:M/MAV:N/MAC:H/MAT:N/MPR:L/MUI:N/MVC:H/MVI:H/MVA:H/MSC:H/MSI:S/MSA:H");
            var vector = cvss_v40.Vector;       // "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:M/IR:H/AR:M/MAV:N/MAC:H/MAT:N/MPR:L/MUI:N/MVC:H/MVI:H/MVA:H/MSC:H/MSI:S/MSA:H"
            var version = cvss_v40.Version;     // 4.0
            var valid = cvss_v40.IsValid();     // true
            var severity = cvss_v40.Severity(); // "High"
            var score = cvss_v40.Score();       // 8,7
            cvss_v40.TemporalScore();           // Throws NotSupportedException

            var cvss_v30 = CvssSuite.Create("CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/CR:L/IR:M/AR:H/MAV:N/MAC:H/MPR:N/MUI:R/MS:U/MC:N/MI:L/MA:H");
            vector = cvss_v30.Vector;           // "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/CR:L/IR:M/AR:H/MAV:N/MAC:H/MPR:N/MUI:R/MS:U/MC:N/MI:L/MA:H"
            version = cvss_v30.Version;         // 3.0
            valid = cvss_v30.IsValid();         // true
            severity = cvss_v30.Severity();     // "High"

            var cvss_v31 = CvssSuite.Create("CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:U");
            vector = cvss_v31.Vector;           // "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:U"
            version = cvss_v31.Version;         // 3.1
            valid = cvss_v31.IsValid();         // true
            severity = cvss_v31.Severity();     // "Medium"

            var cvss_v2 = CvssSuite.Create("AV:A/AC:M/Au:S/C:P/I:P/A:P/E:POC/RL:TF/RC:UC/CDP:L/TD:M/CR:M/IR:M/AR:M");
            vector = cvss_v2.Vector;            // "AV:A/AC:M/Au:S/C:P/I:P/A:P/E:POC/RL:TF/RC:UC/CDP:L/TD:M/CR:M/IR:M/AR:M"
            version = cvss_v2.Version;          // 2
            valid = cvss_v2.IsValid();          // true
            severity = cvss_v2.Severity();      // "Low"
            
            // Scores
            // Use OverallScore() or Score() for CVSS v4
            var baseScore = cvss_v2.BaseScore();                    // 4.9
            var temporalScore = cvss_v2.TemporalScore();            // 3.6
            var environmentalScore = cvss_v2.EnvironmentalScore();  // 3.2
            var overallScore = cvss_v2.OverallScore();              // 3.2

            // Selected metric
            var accessVector_1 = cvss_v2.SelectedMetric("Access Vector");                         // "Adjacent Network"
            var accessVector_2 = cvss_v2.SelectedMetric(Cvss.Suite.Cvss2.Metrics.AccessVector);   // "Adjacent Network"

            var remediationLevel_1 = cvss_v2.SelectedMetric("Remediation Level");                       // "Temporary Fix"
            var remediationLevel_2 = cvss_v2.SelectedMetric(Cvss.Suite.Cvss2.Metrics.RemediationLevel); // "Temporary Fix"

            var cvss_v2_metrics = Cvss.Suite.Cvss2.Metrics.ToList();            // Returns a list with all CVSS v2 metrics.
            var cvss_v2_temporalMetrics = Cvss.Suite.Cvss2.Metrics.Temporal();  // Returns a list with all CVSS v2 temporal metrics.

            var cvss_v30_metrics = Cvss.Suite.Cvss30.Metrics.ToList();                      // Returns a list with all CVSS v3.0 metrics.
            var cvss_v30_environmentalMetrics = Cvss.Suite.Cvss30.Metrics.Environmental();  // Returns a list with all CVSS v3.0 environmental metrics.

            // Exceptions
            var invalidVector = CvssSuite.Create("random string or empty string");
            valid = invalidVector.IsValid();        // false
            version = invalidVector.Version;        // 0
            baseScore = invalidVector.BaseScore();  // will throw System.ArgumentException

            invalidVector = CvssSuite.Create("AV:N/AC:P/C:P/AV:U/RL:OF/RC:C"); // invalid vector, authentication is missing
            valid = invalidVector.IsValid();        // false
            version = invalidVector.Version;        // 2
            baseScore = invalidVector.BaseScore();  // will throw System.ArgumentException
        }
    }
}

```

--------------------------------

### Reference CvssSuite with PackageReference

Source: https://www.nuget.org/packages/CvssSuite

For projects supporting PackageReference, add this XML node to your project file.

```xml
<PackageReference Include="CvssSuite" Version="1.1.0" />
```

--------------------------------

### Create and Analyze CVSS Vectors in C#

Source: https://www.nuget.org/packages/CvssSuite

Use the CvssSuite.Create method to parse CVSS vectors of different versions (v4.0, v3.0, v3.1, v2). Access properties like Vector, Version, and IsValid. Calculate Severity and Score. Note that TemporalScore() may throw NotSupportedException for some versions.

```csharp
using System;
using Cvss.Suite;

namespace CvssSuiteNugetPackageTest
{
    class Program
    {
        static void Main(string[] args)
        {
            var cvss_v40 = CvssSuite.Create("CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:M/IR:H/AR:M/MAV:N/MAC:H/MAT:N/MPR:L/MUI:N/MVC:H/MVI:H/MVA:H/MSC:H/MSI:S/MSA:H");
            var vector = cvss_v40.Vector;       // "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:M/IR:H/AR:M/MAV:N/MAC:H/MAT:N/MPR:L/MUI:N/MVC:H/MVI:H/MVA:H/MSC:H/MSI:S/MSA:H"
            var version = cvss_v40.Version;     // 4.0
            var valid = cvss_v40.IsValid();     // true
            var severity = cvss_v40.Severity(); // "High"
            var score = cvss_v40.Score();       // 8,7
            cvss_v40.TemporalScore();           // Throws NotSupportedException

            var cvss_v30 = CvssSuite.Create("CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/CR:L/IR:M/AR:H/MAV:N/MAC:H/MPR:N/MUI:R/MS:U/MC:N/MI:L/MA:H");
            vector = cvss_v30.Vector;           // "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L/CR:L/IR:M/AR:H/MAV:N/MAC:H/MPR:N/MUI:R/MS:U/MC:N/MI:L/MA:H"
            version = cvss_v30.Version;         // 3.0
            valid = cvss_v30.IsValid();         // true
            severity = cvss_v30.Severity();     // "High"

            var cvss_v31 = CvssSuite.Create("CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:U");
            vector = cvss_v31.Vector;           // "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:U"
            version = cvss_v31.Version;         // 3.1
            valid = cvss_v31.IsValid();         // true
            severity = cvss_v31.Severity();     // "Medium"

            var cvss_v2 = CvssSuite.Create("AV:A/AC:M/Au:S/C:P/I:P/A:P/E:POC/RL:TF/RC:UC/CDP:L/TD:M/CR:M/IR:M/AR:M");
            vector = cvss_v2.Vector;            // "AV:A/AC:M/Au:S/C:P/I:P/A:P/E:POC/RL:TF/RC:UC/CDP:L/TD:M/CR:M/IR:M/AR:M"
            version = cvss_v2.Version;          // 2
            valid = cvss_v2.IsValid();          // true
            severity = cvss_v2.Severity();      // "Low"
            
            // Scores
            // Use OverallScore() or Score() for CVSS v4
            var baseScore = cvss_v2.BaseScore();                    // 4.9
            var temporalScore = cvss_v2.TemporalScore();            // 3.6
            var environmentalScore = cvss_v2.EnvironmentalScore();  // 3.2
            var overallScore = cvss_v2.OverallScore();              // 3.2

            // Selected metric
            var accessVector_1 = cvss_v2.SelectedMetric("Access Vector");                         // "Adjacent Network"
            var accessVector_2 = cvss_v2.SelectedMetric(Cvss.Suite.Cvss2.Metrics.AccessVector);   // "Adjacent Network"

            var remediationLevel_1 = cvss_v2.SelectedMetric("Remediation Level");                       // "Temporary Fix"
            var remediationLevel_2 = cvss_v2.SelectedMetric(Cvss.Suite.Cvss2.Metrics.RemediationLevel); // "Temporary Fix"

            var cvss_v2_metrics = Cvss.Suite.Cvss2.Metrics.ToList();            // Returns a list with all CVSS v2 metrics.
            var cvss_v2_temporalMetrics = Cvss.Suite.Cvss2.Metrics.Temporal();  // Returns a list with all CVSS v2 temporal metrics.

            var cvss_v30_metrics = Cvss.Suite.Cvss30.Metrics.ToList();                      // Returns a list with all CVSS v3.0 metrics.
            var cvss_v30_environmentalMetrics = Cvss.Suite.Cvss30.Metrics.Environmental();  // Returns a list with all CVSS v3.0 environmental metrics.

            // Exceptions
            var invalidVector = CvssSuite.Create("random string or empty string");
            valid = invalidVector.IsValid();        // false
            version = invalidVector.Version;        // 0
            baseScore = invalidVector.BaseScore();  // will throw System.ArgumentException

            invalidVector = CvssSuite.Create("AV:N/AC:P/C:P/AV:U/RL:OF/RC:C"); // invalid vector, authentication is missing
            valid = invalidVector.IsValid();        // false
            version = invalidVector.Version;        // 2
            baseScore = invalidVector.BaseScore();  // will throw System.ArgumentException
        }
    }
}
```

--------------------------------

### Reference CvssSuite in C# File-based Apps

Source: https://www.nuget.org/packages/CvssSuite

The #:package directive can be used in C# file-based apps to reference the package.

```csharp
#:package CvssSuite@1.1.0
```

--------------------------------

### Reference CvssSuite in F# Interactive

Source: https://www.nuget.org/packages/CvssSuite

The #r directive can be used in F# Interactive and Polyglot Notebooks to reference the package.

```fsharp
#r "nuget: CvssSuite, 1.1.0"
```
Tokens:
Raw