> the intended purpose of CVEs is to actually identify serious (and less serious) exploits No. It was created for cross-referencing different vulnerability dat

> the intended purpose of CVEs is to actually identify serious (and less serious) exploits No. It was created for cross-referencing different vulnerability databases. https://www.tripwire.com/state-of-security/history-common-vulnerabilities-exposures-cve https://www.tripwire.com/state-of-security/history-common-vu... <quote> There’s just one problem – each security vendor has its own database with little to no crossover. Each vendor’s tool generates its own alert for detected vulnerabilities, and these alerts must be manually cross-referenced between the tools to determine if they are separate issues or multiple alerts for the same issue. </quote>