title: Data extraction from the NVD data feed and cpe_match meaning
body: <p>My IT product has CPE defined, for example:
  <code>cpe:/o:microsoft:windows_vista:6.0:sp1:~-~home_premium~-~x64~-</code></p>
  
  <p>I am using NVD Data Feed to get all publicly known vulnerabilities.
  CVEs are given in .json file and under each CVE item there is a <b>configurations</b> node.
  If I want to check if my CPE exists in the current CVE item I guess I have to check configurations node, but I am not sure what is the purpose of the           "operator" : "OR", "vulnerable" : false.</p>
  
  <p>Can I just compare my CPE with cpe23Uri or I have to somehow consider <i>operators</i> and <i>vulnerable</i> nodes as well?</p>
  
  <pre><code>"configurations" : {
    "CVE_data_version" : "4.0",
    "nodes" : [ {
      "operator" : "AND",
      "children" : [ {
        "operator" : "OR",
        "cpe_match" : [ {
          "vulnerable" : true,
          "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
          "versionStartIncluding" : "10.3",
          "versionEndExcluding" : "10.3.183.19"
        }, {
          "vulnerable" : true,
          "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
          "versionStartIncluding" : "11.2",
          "versionEndIncluding" : "11.2.202.233"
        } ]
      }, {
        "operator" : "OR",
        "cpe_match" : [ {
          "vulnerable" : false,
          "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*"
        }, {
          "vulnerable" : false,
          "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"
        }, {
          "vulnerable" : false,
          "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*"
        } ]
      } ]
    }]
  </code></pre>