What are important CVEs?

Those likely to be exploited (EPSS)

Those likely to be present

Higher likelihood of exploitation -> lower prevalence of CVE info

No clear pattern with prevalance!