As a standard way of describing application security vulnerabilities using XML?

• 描述应用程序安全漏洞的标准化方法吗?