Understanding: Affected but Not Vulnerable
Investigating vulnerabilities is not just understanding if a piece of vulnerable code is present on the system, but determining if it actually exposes an exploitable, attackable vulnerability. Understand what it means to be affected but not vulnerable.