---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Confidence score calculation example

# Confidence score calculation example {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Example of calculating the confidence for a zero-day vulnerability based on its Common Vulnerabilities and Exposures (CVE) information.  
Following is an example of calculating the confidence score from the Common Platform Enumeration (CPE) information of CVE-2019-5786.  
Note:  
To view the CPEs, you can group the Vulnerability column by vulnerability. For details on viewing the vulnerable software details, see [View vulnerable software details](https://servicenow-prod.fluidtopics.net/Y_TkL94V7UnFsSDA5~TQKw "View the details of the vulnerable software, in this case, Google Chrome. It is matched against the discovery model and the Common Platform Enumeration (CPE). This CPE version impacts all the Google Chrome versions.").
Following is a sample exposure assessment record:

Following is a sample discovery model:

How to calculate the confidence score
The confidence score range is 0--1. Based on the CPE information, the confidence score is calculated using the following formula:  

    ((BASE SCORE) + (publisher score) +(product score) + (version score) + (edition score) + (display name score)) / 100

=

    ((25) + (10) + (10)) / 100

=

    45 / 100

=

    .45

Note:  
To refer to the values used to calculate the confidence score, see [Confidence score reference tables for exposure assessment](https://servicenow-prod.fluidtopics.net/ae8lGIOW6NeqMLvcAsu9MA "Reference values used to calculate the confidence score.").

Calculating confidence score when the software model is matched with the normalized discovery model

If you are using the normalized discovery model, the additional information available for the
software discovery model provides an enhanced confidence score. Following is the sample calculation:
Following is a sample normalized exposure assessment record.

Following is a sample normalized discovery model.  

    ((BASE SCORE) + (publisher score) + (product score) + (version score) + (edition score) + (display name score)) / 100

=

    ((25) + (20) + (15) + (15) + (0) + (10)) / 100

=

    85 / 100

=

    .85

Note:  
To refer to the values used to calculate the confidence score, see [Confidence score reference tables for exposure assessment](https://servicenow-prod.fluidtopics.net/ae8lGIOW6NeqMLvcAsu9MA "Reference values used to calculate the confidence score.").