Under Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers (NISTIR 8246), Section 4:
The current NVD analyst workflow for a single CVE record consists of two primary stages:
Initial Analysis and
Initial Analysis involves an NVD analyst investigating the ...
There are publicly posted Proof of Concept URLs that can be used to test for this vulnerability:
Nessus agents also work with on-prem Nessus Manager running on either Windows or their Tenable Core VM. The agent scans can also synch with Tenable.sc on -prem as well and import scan results for more advanced reporting and analytics in a single pane of glass.