What are you running?

Name a product and the release you are on, and the table comes back filtered to the CVEs affecting it, with what VRT holds for each: whether the agent blocks it, whether a patch exists, whether anyone is exploiting it.

What a version match means. A release matches when the CVE data names it. Oracle Java SE is the one place that is read more widely, and it is deliberate: Oracle supports a single update of each train at a time and records only that one, so 8u491 there means 8u491 and everything before it in Java 8, but says nothing about Java 11. Everywhere else, including the rest of Oracle, a named version means itself, because those products support many releases at once and the advisory lists them all. Where a version could not be read at all, the CVE is still returned rather than hidden.