Use a LIKE test instead of equality

Fixes the ability to search for CVE (as well as other reference types)
with a non-exact match

[SeeRM #7989]