Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Are vulnerabilities ever deleted from NVD?

April 26, 2017deleted nvd vulnerabilities

0

Posted

Are vulnerabilities ever deleted from NVD?

1 Answer

0

Posted

No. Vulnerabilities that are rejected by the Common Vulnerabilities and Exposures (CVE) standard vulnerability dictionary (e.g. because they are duplicates) are labeled as such in the description with an explanation of the problem. The vulnerability attribute fields are then cleared. The NVD web site will always show a web page for rejected vulnerabilities if you send that CVE name in the URL but will never include them in a search result. In the NVD XML feed, rejected vulnerabilities have the “reject” attribute within the entry field equal to “0”.