initial version of cve-in-exploit-target.xml