Implement endpoint changes regarding CVSS scores

[dejanb]

PR #1604 proposes ADR for changing APIs to properly handle scores for vulnerabilities and advisories. This is a placeholder issue for this work. More granular work will be defined by sub-tasks.