HostedScan uses CVSS v3 scores, except for in rare cases of older vulnerabilities which have not yet been assigned a v3 score and only have a v2.
How can we help?
Answers from the HostedScan team on setting up scans, internal network scanning, reports, and billing, and on fixing scans that fail or run long.
Configuration
What CVSS Version Does HostedScan Use?
HostedScan uses CVSS v3 scores. An older vulnerability that has not been assigned a v3 score shows its CVSS v2 score instead.
Last updated on 19 Oct, 2026