NVD CVE Analysis Timing

1 · Jerry Gamblin · Nov. 16, 2022, 11:37 p.m.
The National Vulnerability Database plays a vital role in the CVE publication process that many people may overlook or not know they are responsible for. After MITRE publishes a CVE, the NVD enriches it with data points that make it actionable by security companies and professionals. Some of these data points include:CWECVSS 3.1 Base ScoreCPE I was recently asked how long, on average, it takes NVD to complete its initial analysis. I looked around for a bit and couldn’t find the information, so I...