CVE
CVE is a public catalog that assigns each disclosed security vulnerability a unique identifier.
CVE, short for Common Vulnerabilities and Exposures, is a system that gives publicly known security flaws in software and hardware a unique identifier in the form CVE-year-sequence number and records them in a public catalog. The U.S. nonprofit research organization MITRE launched it in 1999, and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) sponsors the program.
Security vendors, software makers and researchers use CVE identifiers to refer to the same flaw when they share information and track patches. Identifiers are issued by companies and organizations designated as CVE Numbering Authorities (CNAs), and severity is commonly reported alongside them as a score under the separate CVSS standard.
This entry is based on AIPOST articles and widely known facts. If something is wrong, please send us a correction request.