To implement complex algorithms (e.g. Security - Incident - CVSS 3.1 (CVSS Calculation explained )) you can use the following structural elements.

if condition

Allows you to compare expression1 with expression2 using a condition.

• an expression is a single-line expression which can contain these operators. Operators for Calculated Fields

• you can use the following conditions

  • >

  • >=

  • ==

  • <=

  • <

  • !=

• the if sections cannot be nested

• the Else section is optional

Structure

#if (expression1) condition (expression2) {
// one or more lines
} else {
// one or more lines
}

Example

#if (scope) == (1) {
  #variableImpact(6.42 $variableISS *)
} else {
  #variableImpact(7.52 $variableISS 0.029 - * 3.25 $variableISS 0.02 - 15 ^ * -)
}

return declaration

Returns the result of the expression . the following elements are ignored

Structure

#return(expression)

Example

#return($variableImpact $variableExploitability + 10 $min 1 $roundUp)

variable definition

Defines a variable which you can access in the following lines

Structure

#variableNAME(expression)

Example

#variableToUsePrivilegesRequired(0.85)

variable usage

Returns the value of a variable and can be used within expressions

Structure

$variableNAME

Example

8.22 attack-vector attack-complexity $variableToUsePrivilegesRequired user-interaction * * * *

or combined with variable definition

#variableExploitability(8.22 attack-vector attack-complexity $variableToUsePrivilegesRequired user-interaction * * * *)