3 ms·

This may be a stated reason but it's questionable logic. There are of course many cases where people need to reference and discuss this vulnerability and its im

• immibis 1y ago
  There are many cases where people need to reference and discuss the weather, but the weather doesn't need a CVE number. If you could hypothetically put it in a known vulnerability scanner then it should have a CVE. Otherwise no.
  • fulafel 1y ago
    It's for communication. "The Common Vulnerabilities and Exposures (CVE) Program’s primary purpose is to uniquely identify vulnerabilities and to associate specific versions of code bases (e.g., software and shared libraries) to those vulnerabilities. The use of CVEs ensures that two or more parties can confidently refer to a CVE identifier (ID) when discussing or sharing information about a unique vulnerability" (from https://nvd.nist.gov/vuln https://nvd.nist.gov/vuln)