a gap in the OVAL technology: lack of a formatting mechanism to enable “the free
exchange of information on new vulnerabilities and exploits amongstresponsible
vendors, Computer Security Incident ResponseTeams (CSIRT), and their user
communities.” According to the CD&R Group researchers, OVAL was limited in