Calculate OWASP risk ratings using the official methodology — vulnerability, technical and business impact.