Gets a value indicating whether the vulnerability is a CVE, or null (Nothing in Visual Basic) if unknown.