Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme

Published

September 1, 2002

Author(s)

Peter M. Mell, Timothy Grance

Abstract

[Superseded by SP 800-51 Rev. 1 (February 2011): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=907934] The Common Vulnerabilities and Exposures (CVE) vulnerability naming scheme is a dictionary of common names for publicly known information technology (IT) system vulnerabilities. It is an emerging industry standard that has achieved wide acceptance by the security industry and a number of government organizations. Federal departments and agencies should use this standard for computer vulnerability related activities.

Citation

Special Publication (NIST SP) - 800-51

Report Number

800-51

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Superceded By Publication

Guide to Using Vulnerability Naming Schemes

Keywords

computer, exposure, standard, vulnerability

Citation

Mell, P. and Grance, T. (2002), Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD (Accessed October 10, 2025)