Start
Name the issue if you want to compare it later. These fields do not move the score.
Consequence
What does the attacker-controlled path actually reach?
1 of 4
Deployment
Score the most exposed documented deployment, not the worst imaginable one.
2 of 4
Safeguards
Only credit safeguards that bound this specific harm path.
3 of 4
Scale And Recovery
Separate single-event harm from fleet reach and recovery burden.
4 of 4