CVE (Common Vulnerabilities and Exposures)

CVE is a programme run by MITRE under U.S. CISA sponsorship that issues globally unique identifiers (e.g. CVE-2014-0160) to publicly disclosed vulnerabilities. Each entry includes a short description, references to advisories, and the affected product range. CVE Numbering Authorities (CNAs) such as vendors and coordination centres can assign IDs within their scope. CVE itself does not score severity — CVSS, EPSS, and the CISA KEV list are layered on top. Security teams use CVE IDs to correlate scanner output, vendor patches, threat intelligence, and SBOM data into a single remediation workflow.