A Framework for Security Risk Level Measures Using CVSS for Vulnerability Categories