The CPE URI in cpe format in which the vulnerability manifests. Examples include distro or storage location for vulnerable jar.