practitioners and tool vendors that the sheer number of software vulnerability
lists and taxonomies was beginning to degrade their usefulness. The users of
such lists and taxonomies either had to arbitrarily commit to only one or spend
an increasing amount of time and effort to—