Mission and Overview

NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).

Resource Status

NVD contains:

63692

CVE Vulnerabilities

236

Checklists

248

US-CERT Alerts

2889

US-CERT Vuln Notes

10286

OVAL Queries

95772

CPE Names

Last updated: 8/7/2014 6:29:48 PM

CVE Publication rate: 16.73

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index

Vulnerability Workload Index: 6.51

About Us

NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

Common Configuration Enumeration (CCE) Reference Data.

CCE provides unique identifiers to system configuration issues in order to facilitate fast and accurate correlation of configuration data across multiple information sources and tools. For example, CCE Identifiers can be used to associate checks in configuration assessment tools with statements in configuration best-practice

The catalog of security controls from NIST SP 800-53 may be found here.

Beta CCE to 800-53 Mappings:

• Beta CCE to 800-53 Mappings - 6.51MB, Updated: 3/1/2013 11:54:34 PM EST
• NVD CCE V2.0 Schema

CCE Standards Information

General information about CCE.