CVE Acknowledgement or set Not Applicable