what characteristics are used to assess the severity of found vulnerabilities? select all that apply.