[ImportDocument] - Suggest all identified CVEs even if the CVE does not exist in the platform

[romain-filigran]

Description

The ImportDocument connector is able to recognize/identify a CVE in a text but does not suggest it in the workbench if the CVE does not already exist in the platform.
It would be preferable to suggest any recognized CVEs.

Environment

2. OpenCTI version: 6.3.6

Reproducible Steps

Import a text file document that mention a CVE that doesn't exist in the platform.

[flavienSindou]

Could you please confirm if I understand your request correctly? In your opinion, the connector vulnerability ingestion use case should be configurable as follows:
Default: Skip unknown CVEs.
Alternative: Ingest vulnerabilities matching CVEs based only on their names and establish relevant relationships with discovered observables and other domain objects.