Common Vulnerabilities and Exposures (CVE) is an online database of attacks, exploits, and compromises maintained by the MITRE organization. This system was officially launched for the public in September 1999. CVEs are assigned by a CVE Numbering Authority (CNA). CVE numbers can be assigned by:
- The MITRE corporation functions as Editor and Primary CNA.
- The vendors assign CVE numbers to their own products.
- Third-party coordinators such as the CERT Coordination Center.