Application Security
Dependency Vulnerability Age Calculator
Enter CVE published date, patch available date, and CVSS score to compute exposure window, patch urgency SLA, and comparison against industry averages.
No data is transmitted — everything runs locallyTool
Example — Representative default scenario — days open 67 · severity high.
Exposure window
0 days
CVE published to patch
SLA for CVSS 5
30 days
Medium
SLA status
✓ Within SLA
Risk level
Medium
CVSS 5
About this tool
Dependency Vulnerability Age Calculator
The Dependency Vulnerability Age Calculator computes CVE exposure window, patch SLA tier from CVSS score, and comparison against industry mean time to patch benchmarks.
• Calculate how long a production system has been exposed to a CVE
• Determine SLA urgency tier from CVSS score before scheduling a patch
• Compute exposure window for a security incident post-mortem
• Compare patch timeline against NIST mean time to patch benchmarks
Affiliate disclosure
Uptime, incident, and on-call management. Better Stack provides status pages, incident management, and on-call scheduling for engineering teams.
Alert on new vulnerability events in real time — Better Stack security monitoring
External site · Independent provider · We may receive a commission · Not a recommendation
FAQ
What does this tool tell you?
The Dependency Vulnerability Age Calculator computes CVE exposure window, patch SLA tier from CVSS score, and comparison against industry mean time to patch benchmarks.
What affects the result most?
Vulnerability exposure window: days from CVE published to patch applied. Mean time to patch (MTTP): industry average is 60-120 days — high risk for critical CVEs. CVSS score to patch urgency: Critical (9.0+) = 24-72h SLA, High (7.0-8.9) = 7 days, Medium = 30 days.
How should I use the result?
The calculation is deterministic — the same inputs always produce the same output — so the most useful workflow is to vary one input at a time and see which factor moves the result most. That tells you where to focus your attention before committing to a decision.
Related tools