CNA
An organization authorized to assign CVE identifiers on its own behalf, including vendors, open-source foundations and third-party research organizations. Numbering standards differ across CNAs.
Timeline (last 90 days)
GTIG points out that automated CNA numbering policies in the open source ecosystem push up the baseline numbers, and the number of IDs reflects the aggressiveness of the process rather than an expansion of the real attack surface.
CVE is a global vulnerability identification system maintained by MITRE Corporation, with identifiers assigned through a distributed network of CNAs, of which there are hundreds of authorized CNAs worldwide.
All Facts (2)
GTIG points out that automated CNA numbering policies in the open source ecosystem push up the baseline numbers, and the number of IDs reflects the aggressiveness of the process rather than an expansion of the real attack surface.
50%UnverifiedCVE is a global vulnerability identification system maintained by MITRE Corporation, with identifiers assigned through a distributed network of CNAs, of which there are hundreds of authorized CNAs worldwide.
50%