Brief vulnerability exploitability from CVSS, asset exposure, exploit maturity, compensating controls, and patch window