github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/VEX/Use-Cases/Case-12/README.md (about)

     1  # VEX Use Case 12
     2  
     3  | Single Product | Single Version | Multiple Vulnerabilities | Affected & Not Affected |
     4  | --- | --- | --- | --- |
     5  
     6  A VEX states that CVE-2020-25649 and CVE-2020-14195 are not exploitable with different justifications for each, and CVE-2020-35491 is exploitable. The VEX is specific to Acme Product v2.2.0.