I saw it here that CentOS have no official support for OVAL security definitions(patch, vulnerabilities).
Based on what I observe at oval.mitre.org, it looks like they don't even have a vulnerability definition for CentOS 7.x.
Is this true? If so, do we have other options for security management on CentOS systems?