Damage Potential Assesses the potential impact on the organization if the vulnerability is exploited. Rate from 1 (least damage) to 10 (most severe damage).

Reproducibility Measures how consistently the threat can be reproduced. Rate from 1 (very hard to reproduce) to 10 (can be reproduced every time).

Exploitability Evaluates how easy it is to exploit the vulnerability. Rate from 1 (very difficult to exploit) to 10 (requires no special conditions to exploit).

Affected Users Indicates the proportion of users that could be affected by the vulnerability. Rate from 1 (few users affected) to 10 (all users affected).

Discoverability Assesses how obvious the vulnerability is to an attacker. Rate from 1 (very hard to discover) to 10 (obvious to anyone).