The Common Vulnerability Scoring System (CVSS) calculates the severity rating of vulnerabilities based on exploitability and impact. Optional sections for the enironment vary between versions.