https://ones.com/blog/knowledge/decoding-security-vulnerability-assessment-reports/