This is an old revision of the document!
Impacted Component is the Component that suffers the consequence of the exploited Vulnerability. It can either be the same Component as the Vulnerable Component, or, if a scope changed has occurred, a different one.
Source: https://www.first.org/cvss/user-guide#Glossary-of-Terms