The title should be Severity Metrics not Severities Vectors - see the Spec at: https://www.first.org/cvss/v3.1/specification-document. Only one of the metrics has vector in the name.

Also using VCID=63q1-581t-aaag as an example:

• We have 29 Severities vectors entries which are almost all duplicate CVS:3.1 scores likely copied from the original CVE entry. Impossible to tell since none have any clue about data origin.
• These appear to be related to the 29 entries in the Essentials/Severity table where the System is some version of CVSS.
• The current display makes it practically impossible to visually identify differences if there are any. I do not see the value of showing the Vector values that do not apply grayed-out so we should just show the values that apply. This would greatly simplify the display.
• It would be nice to have some more tabular format with the metrics as rows and the origin/ref as the columns (mockup attached). This would probably require a different screen for each CVSS version but that is probably a good idea in any case. This might require horizontal scrolling in some cases, but it would be a big improvement over the current display
• In the Severity list we have RedHat entries coded as "rhas" in the System field - should this be "rhsa"?Also per https://access.redhat.com/security/updates/classification#normal, Red Hat uses CVSS:3.1 since 2016 so perhaps that should be the label instead.
  Severity-Metrics-table.pdf

See also the closely related issue:

• severity vectors bug: Do not list ALL duplicated severity vectors in the UI. Also display the score #1729

We start to have something better, and here are a few last mile items to improve this UI.
The current UI for https://public2.vulnerablecode.io/vulnerabilities/VCID-63q1-581t-aaag is now:

The improvements could be:

• For each row, add the actual computed score value before the vector. Otherwise the vector is fairly arcane to make sense of. This should come before the vector
  So :
  Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
  should become:
  Score: **9.8** Vector: **AV:N/AC:L/Au:N/C:P/I:P/A:P** - Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

• We need some link to what a vector is for each CVSS for instance https://www.first.org/cvss/ ... better would be a direct link to the vector docs

• It would be great to have a tooltip on hover, using the same values that exists for each parts in https://www.first.org/cvss/calculator/3.1 when hover over them.

  • This may mean collecting all definitions and docs of all values. This is tracked at:
  • Also provide the doc details for each CVSS part RedHatProductSecurity/cvss#70