3 ms·
> Various CNAs assign CVE numbers for their own products (e.g., Microsoft, Oracle, HP, Red Hat) I wonder if this is part of the problem. The big players aren't
by petesergeant 3y ago
> Various CNAs assign CVE numbers for their own products (e.g., Microsoft, Oracle, HP, Red Hat)
I wonder if this is part of the problem. The big players aren't hurt by this problem because they get to decide what's a real CVE for themselves, so there's little commercial push for change.