thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

National Vulnerability Database (NVD)

The US government repository, maintained by NIST, that enriches CVE records with CVSS scores, CWE and CPE data.

Definition

The NVD analyzes CVEs and adds severity metrics, affected product configurations and references, supporting automated vulnerability management via SCAP. A 2024 analysis backlog led many organizations to also rely on CNA-provided scores and CISA's Vulnrichment data.

Example

Looking up CVE-2024-3400 in the NVD to see its CVSS score and affected PAN-OS versions.

Exam tip

NVD is run by NIST; CVE is run by MITRE.

Related terms