# VEX **Entity class:** Acronym and alias route **VEX** means [[wiki/Vulnerability Exploitability eXchange|Vulnerability Exploitability eXchange]], a machine-readable statement of whether and why a product is affected by a known vulnerability. ## Relationships - **canonical entry:** [[wiki/Vulnerability Exploitability eXchange|Vulnerability Exploitability eXchange]]. - **component inventory:** [[wiki/SBOM|SBOM]]. ## Sources / Provenance - Cybersecurity and Infrastructure Security Agency, [Minimum Requirements for VEX](https://www.cisa.gov/resources-tools/resources/minimum-requirements-vulnerability-exploitability-exchange-vex), 2022.