New CVE Record Format Enables Additional Data Fields at Time of Disclosure

When the CVE® Program was first established in 1999, a CVE Record consisted of only three elements: the CVE-ID itself, a brief vulnerability description, and a reference URL directing to further relevant information. This solved an important problem: that two or more people or tools could refer to a vulnerability and know they are talking about the same thing, thereby saving significant time and cost from a single reference.

Over the last 25 years, CVE has grown into the backbone …

cve cybersecurity data disclosure important information information security information technology people problem program record reference relevant tools url vulnerability vulnerability management