CVE enrichment