Technology and tools
What is CVE?
The public catalogue number given to one specific disclosed vulnerability, so everyone can refer to the same flaw.
A CVE (Common Vulnerabilities and Exposures) identifier is the public catalogue number given to one specific disclosed vulnerability, in the form CVE-year-number. The programme is run by MITRE with numbers issued through CVE Numbering Authorities.
A CVE number is a name, not a risk score. It lets vendors, scanners and analysts refer to the same flaw, while severity comes from CVSS and the likelihood of exploitation from sources such as EPSS and CISA's KEV catalogue.