Here, what part of your problem wouldn't be solved by a DB with a table of vulnerabilities, a table of branches and divisions, and a table of people?
A query can fetch the images and apps used by a division, then use that to query the vuln database.
I mean, I understand the problem is not super simple, but I fail to see what knowledge graphs bring to it?