# Scope

Determines whether a vulnerability in one system or component can impact another system or component. If a vulnerability in a vulnerable component can affect a component which is in a different security scope than the vulnerable component, a scope change occurs. Scope has two possible ratings: Changed (C) – An exploited vulnerability can have a carry over impact on another system, Unchanged (U) – The exploited vulnerability is limited in damage to only the local security authority.


## Values

| Name             | Value            |
| ---------------- | ---------------- |
| `ScopeUnknown`   |                  |
| `ScopeUnchanged` | unchanged        |
| `ScopeChanged`   | changed          |