The MITRE CVE [38] project had already made significant progress
in addressing the second of these needs (one reason why CVE was being
increasingly adopted by vulnerability assessment tool vendors and computer
and cyber security incident response teams).