Who owns and maintains the CVE program and database?
The MITRE Corporation owns the CVE trademark and operates the CVE Program Secretariat, which maintains the program’s infrastructure. DHS/CISA sponsors and funds the program, while NIST maintains the separate National Vulnerability Database (NVD).
Community Discussion