Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme



Peter M. Mell, Timothy Grance


[Superseded by SP 800-51 Rev. 1 (February 2011):] The Common Vulnerabilities and Exposures (CVE) vulnerability naming scheme is a dictionary of common names for publicly known information technology (IT) system vulnerabilities. It is an emerging industry standard that has achieved wide acceptance by the security industry and a number of government organizations. Federal departments and agencies should use this standard for computer vulnerability related activities.
Special Publication (NIST SP) - 800-51
Report Number


computer, exposure, standard, vulnerability


Mell, P. and Grance, T. (2002), Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD (Accessed April 16, 2024)
Created September 1, 2002, Updated May 4, 2021