VULNERABILITY REPORTING