Scope

Scope (cvss:S:1.0.0)

the ability for a vulnerability in one software component to impact resources beyond its means, or privileges

Value	Key	Definition
Unchanged	U	An exploited vulnerability can only affect resources managed by the same authority. In this case the vulnerable component and the impacted component are the same.
Changed	C	An exploited vulnerability can affect resources beyond the authorization privileges intended by the vulnerable component. In this case the vulnerable component and the impacted component are different.

Scope (cvss:S:1.0.0) JSON Example

{
  "namespace": "cvss",
  "key": "S",
  "version": "1.0.0",
  "name": "Scope",
  "definition": "the ability for a vulnerability in one software component to impact resources beyond its means, or privileges",
  "schemaVersion": "2.0.0",
  "values": [
    {
      "key": "U",
      "name": "Unchanged",
      "definition": "An exploited vulnerability can only affect resources managed by the same authority. In this case the vulnerable component and the impacted component are the same."
    },
    {
      "key": "C",
      "name": "Changed",
      "definition": "An exploited vulnerability can affect resources beyond the authorization privileges intended by the vulnerable component. In this case the vulnerable component and the impacted component are different."
    }
  ]
}