Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme

Mell, Peter; Grance, Tim

doi:https://doi.org/10.6028/NIST.SP.800-51

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-51

Withdrawn on February 25, 2011. Superseded by SP 800-51 Rev. 1

Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme

Documentation

Date Published: September 2002

Author(s)

Peter Mell (NIST), Tim Grance (NIST)

Abstract

The Common Vulnerabilities and Exposures (CVE) vulnerability naming scheme is a dictionary of common names for publicly known information technology (IT) system vulnerabilities. It is an emerging industry standard that has achieved wide acceptance by the security industry and a number of government organizations. Federal departments and agencies should use this standard for computer vulnerability related activities.

Keywords

computer; exposure; standard; vulnerability

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-51
Download URL

Supplemental Material:
None available

Document History:
09/01/02: SP 800-51 (Final)