Does exposure management replace vulnerability management?

No. Vulnerability management remains a key source of technical findings. Exposure management adds broader context, including reachability, identities, misconfigurations, attack paths and business impact, to guide action across those findings.