be used by tool vendors.WhatVEDEF is intended to provide, then, is a metadata
interchange format for CVE and OVAL data as well as Common Malware
40 Software Security Assurance State-of-the-Art Report (SOAR)
Section 3 Why is Software at Risk?