Attack vector
Attack complexity
Privileges required
User interaction
Scope
Confidentiality
Integrity
Availability
Confidentiality requirement
Integrity requirement
Availability requirement