Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Identifying Critical Patches With ICAT



Peter M. Mell


[For the latest information on vulnerabilities, see the National Vulnerability Database,]The NIST computer security division has created a searchable index containing 700 of the most important computer vulnerabilities. This index, called the ICAT Metabase, enables your security personnel to search the set of vulnerabilities at a fine granularity and to identify the most critical vulnerabilities for your organization. When a vulnerability is selected, ICAT provides a summary of the vulnerability and links to patch information. ICAT is available at:
ITL Bulletin -


computer security, security threats, system vulnerabilities


Mell, P. (2000), Identifying Critical Patches With ICAT, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD (Accessed June 19, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created July 1, 2000, Updated May 4, 2021