Only the physical security of facilities and systems.

The impact of the vulnerability on system security and potential consequences for users.

Only the economic impact of vulnerabilities.

Internal characteristics of vulnerabilities and external factors that do not depend on time.