Who rated this post

cancel
Showing results for 
Search instead for 
Did you mean: 
PhoneBoy
Admin
Admin

One thing I will also add to this...based on a few decades of doing this...is exploitability of said CVE.
For example, Apache is something we use in our product, but we've stripped out the functionality that we don't use or we've configured a different default where the vulnerability is not exposed. 
Which means, in most cases, the CVEs aren't applicable, thus not relevant.

(1)
Who rated this post