I think Detected fits better here, since version 5.0 can be vulnerable (5.0.0.0) or not (5.0.0.4) and according to the new documentation for Detected:

```
# The target is running the service in question, but the check fails to determine whether
# the target is vulnerable or not.
```

If I'm wrong and it should be Appears still, clarification is welcome please!