AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-cvss-supplemental-no-score

In CVSS v4.0, what effect do Supplemental metrics have on the final score?

Start playing free

  1. None, they only add context
  2. They raise the score by up to 1 point
  3. They replace the Base score

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. FIRST CVSS v4.0 Specification Document www.first.org/cvss/v4.0/specification-document Checked 2026-10-10.
  2. FIRST CVSS v4.0 Specification Document www.first.org/cvss/v4.0/specification-document Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyOn the CVSS qualitative severity scale, which Base Score range is rated Critical?Security & PrivacyIn CVSS v4.0, which metric group covers characteristics that change over time, such as exploit code becoming available?Security & PrivacyIn CVSS, which Attack Vector value scores highest because the attacker can be anywhere on the internet?

That's stuff everyone should know.