andy_ojha
ServiceNow Employee

Hey there - this data originates from the NVD integration.  

Check out this table -> sn_vul_m2m_entry_software

This holds the association between CVE and Vulnerable Software.