New EU vulnerability database will complement CVE program, not compete with it, says ENISA



Thank you for reading this post, don't forget to subscribe!

Nonetheless, that doesn’t imply that everybody is celebrating EUVD’s arrival.

“The creation of EUVD is a mixture of good and dangerous traits,” stated Morey J. Haber, chief safety advisor at safety vendor BeyondTrust. “This can be a complementary service that would enhance response instances and bridge gaps in CVE protection,” he stated, however “dropping MITRE CVE as a worldwide authority is disheartening.”

Whereas Haber stated that treating the CVE system as a “single supply of reality” is now not viable in a globalized vulnerability surroundings, the arrival of the EUVD “might create scoring conflicts, threat prioritization points, and conflicts inside multinational organizations trying to remediate software program flaws.”