Could we potentially display Common Vulnerabilities and Exposures (CVEs) present in our environment while also indicating those that have already been exploited?

Could we potentially display Common Vulnerabilities and Exposures (CVEs) present in our environment while also indicating those that have already been exploited?