Vulnerability scans only test for vulnerabilities that may, potentially, pose a threat to your security environment. Once vulnerabilities are exposed, however, it is crucial to understand whether those vulnerabilities are exploitable in a real-world scenario.