How the New CVE Record Format Will Benefit Consumers

Shannon Sabens of CrowdStrike and Kent Landfield of Trellix , both of whom are CVE Board members and CVE Working Group chairs, speak about how the new CVE Record format — with its new structured data format and optional information fields — will benefit and provide enhanced value to consumers of CVE content moving forward. Specific topics discussed include how the new CVE Record format will enable more complete vulnerability information to be captured early on in the advisory process and how that will benefit consumers; the ability for CVE content consumers to streamline and more easily automate their use of CVE Records because the data format is standardized and machine-readable; the automated creation and publication of CVE Records by CVE Numbering Authorities (currently, 320+ CNAs from 35+ countries!), which means more quality CVE Records can be produced at a faster pace than ever before for use by the worldwide community; and, for the ability of official CVE Program “Authorized Data Publishers (ADPs)” to enrich the content of already published CVE Records with additional risk scores, affected product lists, versions, references, translations, and so on, (learn more about ADPs in this CVE podcast ). Vulnerability scoring methods for CVE Records are also discussed, including NVD’s use of CVSS , CISA’s Known Exploited Vulnerabilities (KEV) Catalog , and more.

You can listen to How the New CVE Record Format Will Benefit Consumers online on Radio and Podcast. Open the player on this page to stream the available audio.

How the New CVE Record Format Will Benefit Consumers is an episode from We Speak CVE by CVE Program.

This episode is 25:41 long.

This episode was published on Sep 26, 2023.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from We Speak CVE when more episodes are available from the podcast feed.