Application Security
Dependency Vulnerability Age Calculator
Enter CVE published date, patch available date, and CVSS score to compute the exposure window, a patch SLA tier from the CVSS score, and whether that SLA has been exceeded.
Calculations run locally in your browserTool
Example — Representative default scenario — days open 67 · severity high.
Exposure window
0 days
CVE published to patch
SLA for CVSS 5
30 days
Medium
SLA status
✓ Within SLA
Risk level
Medium
CVSS 5
Affiliate disclosure
Uptime, incident, and on-call management. Better Stack provides status pages, incident management, and on-call scheduling for engineering teams.
Alert on new vulnerability events in real time — Better Stack security monitoring
External site · Independent provider · We may receive a commission · Not a recommendation
About this tool
Dependency Vulnerability Age Calculator
The Dependency Vulnerability Age Calculator computes the CVE exposure window, a patch SLA tier from the CVSS score, and whether that SLA has been breached.
• Calculate how long a production system has been exposed to a CVE
• Determine SLA urgency tier from CVSS score before scheduling a patch
• Compute exposure window for a security incident post-mortem
• Check whether the exposure window has exceeded the SLA for its CVSS tier
FAQ
What does this tool tell you?
The Dependency Vulnerability Age Calculator computes the CVE exposure window, a patch SLA tier from the CVSS score, and whether that SLA has been breached.
What affects the result most?
Vulnerability exposure window: days from CVE published to patch applied. Mean time to patch (MTTP): industry average is 60-120 days — high risk for critical CVEs. CVSS score to patch urgency: Critical (9.0+) = 24-72h SLA, High (7.0-8.9) = 7 days, Medium = 30 days.
How should I use the result?
The calculation is deterministic — the same inputs always produce the same output — so the most useful workflow is to vary one input at a time and see which factor moves the result most. That tells you where to focus your attention before committing to a decision.
Related tools