Create UI and DB models to create and store effective exploitability both org-wide and app- or product-specific.
We should also include tracing data to document the disposition of a vulnerability. (e.g., Tag a package as affected or not either globally, or just for one or more products)