Hi Folks,
This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning CNA.
First let me back up a bit and give some information about the CVE program. The purpose of a CVE is to uniquely identify a cybersecurity vulnerability. The CVE program was started back in 1999 and is funded by the US federal government, currently out of the Cybersecurity and Infrastructure Security Agency (CISA).