What is CVE?
CVE — CVE (Common Vulnerabilities and Exposures) is a publicly maintained catalogue of known cybersecurity vulnerabilities, each assigned a unique identifier (e.g. CVE-2024-12345) to enable consistent tracking and communication across tools and organisations.
CVE Explained in Detail
The CVE system, maintained by MITRE Corporation and funded by CISA, provides a standardised way to reference specific vulnerabilities. Each CVE entry includes a description, affected products, severity score (CVSS), and references to patches or advisories.
CVE Lifecycle
- Discovery — A vulnerability is found by a researcher, vendor, or attacker.
- Assignment — A CVE Numbering Authority (CNA) assigns a CVE ID.
- Publication — Details are published in the NVD (National Vulnerability Database).
- Remediation — Vendors release patches; organisations apply fixes based on risk priority.
CVSS Severity Ratings
- Critical (9.0–10.0) — Immediate patching required.
- High (7.0–8.9) — Patch within days.
- Medium (4.0–6.9) — Patch within weeks.
- Low (0.1–3.9) — Patch during next maintenance window.
How Hunto AI Helps with CVE
Explore the autonomous AI agents that address cve challenges.