vulnerability, but only if they all occur all the same time. One weakness, X, can be
"broken down" into component weaknesses Y and Z. For example, Symlink Following
(CWE-61) is only possible through a combination of several component weaknesses,
including predictability (CWE-340), inadequate permissions (CWE-275), and race