What is CVE? What is the relationship between CVE and OVAL?
Common Vulnerabilities and Exposures (CVE®) is a list or dictionary that provides common names for publicly known information security vulnerabilities and exposures. CVE common names make it easier to share data across separate network security databases and tools that are CVE-compatible. CVE also provides a baseline for evaluating the coverage of an organization’s security tools. CVE content is determined by the CVE Editorial Board, which is composed of experts from the international information security community. The MITRE Corporation maintains CVE and manages the CVE Editorial Board. See http://cve.mitre.org. OVAL uses the publicly known vulnerabilities identified in CVE List as the basis for most of the OVAL vulnerability definitions (see C5). If discussions in the Community Forum result in information about new and previously unreported vulnerabilities, this information and any supporting references will be forwarded to the CVE Initiative for possible addition to the list. MITRE
