The ENISA Single Reporting Platform's fields record when a vulnerability was detected rather than when a manufacturer became aware of it, requiring manufacturers to maintain separate timestamped records of awareness