static bool matchExpression(MprJson *obj, int operator, char *value)
{
    if (!(obj->type & MPR_JSON_VALUE)) {
        return 0;
    }
    value = stok(value, "'\"", NULL);
    switch (operator) {
    case JSON_OP_EQ:
        return smatch(obj->value, value);
    case JSON_OP_NE:
        return !smatch(obj->value, value);
    case JSON_OP_LT:
        return scmp(obj->value, value) < 0;
    case JSON_OP_LE:
        return scmp(obj->value, value) <= 0;
    case JSON_OP_GT:
        return scmp(obj->value, value) > 0;
    case JSON_OP_GE:
        return scmp(obj->value, value) >= 0;
    case JSON_OP_MATCH:
        return scontains(obj->value, value) != 0;
    case JSON_OP_NMATCH:
        return scontains(obj->value, value) == 0;
    default:
        return 0;
    }
}
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.