Most vulnerability management tools look for both types of issues to they don't just check the app/os version