Glossary Security

CVE

A CVE (Common Vulnerabilities and Exposures) is a unique identifier, such as CVE-2021-44228, assigned to a publicly disclosed security vulnerability.

Last reviewed:

AdSense Placeholder
Slot: header_reference_page

In more detail

The format is CVE-year-number. Having one shared name lets vendors, scanners and security teams talk about the same flaw. Entries are catalogued in the CVE programme and enriched with severity data in databases such as the US National Vulnerability Database.

See also

  • Glossary Vulnerability
    A vulnerability is a weakness in software, hardware or a process that an attacker could exploit to do something unintended.
  • Glossary CVSS
    CVSS (Common Vulnerability Scoring System) is the standard way to rate how severe a vulnerability is, on a scale from 0.0 to 10.0.
  • Glossary Zero-day
    A zero-day is a vulnerability unknown to the software's maker, or without an available fix.
AdSense Placeholder
Slot: footer_leaderboard