CVE, CWE, and remediation prioritization — KSAM.IISAD