Enterprise Architecture White Papers
Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme
Overview This document provides guidelines for federal organizations' acquisition and use of security-related information technology (IT) products and services. NIST's advice is provided in the context of larger recommendations regarding security assurance. Most federal departments and agencies use commercial off-the-shelf (COTS) security products and services to track, detect, or counter known vulnerabilities. A problem with many of these products is that different products use different names for the same vulnerabilities. Without a consistent vulnerability terminology, it is difficult to compare the vulnerability coverage of such security products.
| Publisher | National Institute of Standards and Technology | File Format | PDF, requires Acrobat Rdr 5 |
|---|---|---|---|
| Date Published | September 2002 | Downloads | 10 |
| Format | White Papers | ||
| Topics | |||



