VEX Decisions
VEX information communicates decisions about vulnerability applicability and handling.
Purpose
Section titled “Purpose”VEX decisions help teams document whether a vulnerability affects a product and what action should be taken.
Decision Context
Section titled “Decision Context”A VEX decision may include:
- Applicability assessment
- Justification
- Response information
VEX workflows depend on available product and vulnerability data.