Technical Impact *

Acquired Privilege *

Acquired Privilege Layer *

Internal Control Effectiveness *

Finding Confidence *

Required Privilege *

Required Privilege Layer *

Access Vector *

Authentication Strength *

Level of Interaction *

Deployment Scope *

Business Impact *

Likelihood of Discovery *

Likelihood of Exploit *

External Control Effectiveness *

Prevalence *