Section 3 Why is Software at Risk?
The assessor then uses the output of the OVAL assessment to identify and
obtain appropriate remediation and patch information from the automated
vulnerability assessment/scanning tools, the target system’s vendor(s), and/