I am looking for an image with old version also with lots of vulnerabilities. However, even though I could find old images, they are not considered as vulnerable images by the scanner. All the tests are false based my experiences so far. For example, I followed the instruction at http://www.open-scap.org/resources/documentation/perform-vulnerability-scan-of-rhel-6-machine/