Both CVEs and CWEs will show up on the results of any vulnerability assessment (e.g., from OpenVAS, Nessus, etc.), so like Brian, I cover them in any security class that covers how to perform, analyze, and create action reports using these programs.
However, CVEs match known vulnerabilities...