With the 4.14 release (https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.0) Dependency Track exports the CVSS vectors, references and publish date. The parse should use these data. I will provide a PR.