whether a vulnerability can be used to undergo and attack for CVSS, this falls under the exploitability score