thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Common Vulnerabilities and Exposures (CVE)

A public dictionary of unique identifiers for publicly disclosed cybersecurity vulnerabilities.

Definition

Each CVE entry has an ID in the form CVE-YEAR-NUMBER, a brief description and references. IDs are assigned by CVE Numbering Authorities under the program run by MITRE and sponsored by CISA. NIST's National Vulnerability Database enriches CVEs with CVSS scores and CWE mappings.

Example

CVE-2021-44228 identifies the Log4Shell remote code execution flaw in Apache Log4j.

Exam tip

CVE identifies a specific vulnerability; CWE classifies the weakness type; CVSS scores severity.

Don't confuse it with

Related terms