vulnerability belongs to. Another facet of the same goal has been
to make classification consistent for different levels of
abstraction: the same vulnerability should be classified into the
same category regardless of whether it is considered from a