Defining, categorizing, and ranking vulnerabilities in computer systems, applications, and network infrastructures.