exploitation of vulnerabilities in software, and whether the various vulnerability
databases and classifications described here do, in fact, accurately reflect the
real state of vulnerabilities in software. The CWE effort was launched to help
address this problem.