CVSS v4.0 BTE enrichment CLI that turns CVEs into prioritized vulnerability-management work using NVD, CISA KEV, EPSS, and asset profiles.
Add an 8-15 second GIF showing: CVE input -> enrichment -> BTE vector -> SLA recommendation -> CSV/JSON export.
A vulnerability manager or SOC lead runs this when raw CVSS-B scores are not enough. It adds threat and environmental context so prioritization reflects exploitability and asset impact.
CVSS-B describes technical severity. CVSS-BTE adds threat and environmental context, which is closer to the patching decision defenders actually have to make.
| Output | Use |
|---|---|
| CVSS-BTE vector | Prioritization |
| CSV export | Work queues |
| JSON export | Automation |
| SLA recommendation | Patch planning |
| Asset-profile adjustment | Environment-aware scoring |
git clone https://github.com/anpa1200/cvss_4.0.git
cd cvss_4.0
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python cvss4.py CVE-2024-0000 --profile internet_facing --jsonflowchart LR
CVE[CVE ID] --> NVD[NVD vector]
CVE --> KEV[CISA KEV]
CVE --> EPSS[EPSS]
NVD --> Profile[Asset profile]
KEV --> BTE[CVSS-BTE]
EPSS --> BTE
Profile --> BTE
BTE --> Output[CSV / JSON / SLA]
| Area | Coverage |
|---|---|
| Sources | NVD, CISA KEV, EPSS |
| Profiles | internet_facing, internal_vlan, isolated_ot, dev_test, healthcare_ehr, pci_payment |
| Exports | CSV, JSON |
| Dependency model | Single dependency |
CVE: CVE-2024-0000
Profile: internet_facing
Threat: KEV=true, EPSS=high
Recommendation: patch within 72 hours
Consider renaming to cvss-bte for clarity. GitHub redirects old URLs after rename.
This tool supports prioritization. It does not prove exploitability in your environment and does not replace asset-owner validation.
See CITATION.cff.
MIT recommended.
See SECURITY.md.
This project is part of the 1200km security research ecosystem. Use AdversaryGraph for CTI-to-detection workflows, ATT&CK/ATLAS mapping, actor relevance, IOC enrichment, and analyst-ready reporting.