Add field to describe who is affected by vulnerability

[m0sth8]

What if we add a new field that describes who is affected by vulnerability?

{
  "id": 45, 
  "title": "SQL Injection", 
  "affect": "server"

or

{
  "id": 70,
  "title": "Persistent Cross-Site Scripting (XSS)",
  "target": "user"

possible values: user, server, database, data

[andresriancho]

I like the idea. Recommend research to avoid reinventing the wheel:

• Does CWE do something like this?
• Is there an already existing way to do this?
• Are those values the only ones required?

Not sure if I remember right, but something similar is asked when calculating CVSS?