Validate CVSS 2/3 vector strings

We need to parse CVSS vector strings as part of vulnerability advisory ingestion (&8025 (closed)).

The Vulnerabilities::Advisory model introduced !95622 (merged) needs to validate the two supported formats:

• CVSS3.1
• CVSS2.0