cve report 4