#!/usr/bin/perl -w
use strict;
#cve,opened,daydiff,suse score, nvd score, packages
# CVE-2020-6392,20201226,-321,4.3,4.3,"chromedriver-80.0.3987.87-31.1,chromium-80.0.3987.87-31.1,libre2-0-20200101-25.1,re2-devel-20200101-25.1,chromedriver-80.0.3987.87-lp151.2.63.1,chromium-80.0.3987.87-lp151.2.63.1,chromedriver-80.0.3987.87-bp151.3.59.1,chromium-80.0.3987.87-bp151.3.59.1"

my $first = 1;

my $cvss4plus = 0;
my $cvss7plus = 0;
my $cvss4missed90 = 0;
my $cvss4missed180 = 0;
my $cvss7missed30 = 0;

while (<>) {
	chomp;
	next if (/^#/);
	my ($cve,$first,$daydiff,$susescore,$nvdscore,@packages) = split(/,/);
	next if ($susescore eq "unknown");

	if ($susescore >= 4.0) {
		$cvss4plus++;
		if ($daydiff >= 90) {
			$cvss4missed90++;
		}
		if ($daydiff >= 180) {
			$cvss4missed180++;
		}
	}
	if ($susescore >= 7.0) {
		$cvss7plus++;
		if ($daydiff >= 30) {
			$cvss7missed30++;
		}
	}
}

print "CVSS v3.1 score 4.0 and higher: $cvss4plus\n";
printf "\tMissed 90 days: $cvss4missed90 (%d%%)\n",($cvss4missed90*100)/$cvss4plus;
printf "\tMissed 180 days: $cvss4missed180 (%d%%)\n",($cvss4missed180*100)/$cvss4plus;
print "CVSS v3.1 score 7.0 and higher: $cvss7plus\n";
printf "\tMissed 30 days: $cvss7missed30 (%d%%)\n",($cvss7missed30*100)/$cvss7plus;