What is a CVE? Common Vulnerabilities and Exposures Explained | UpGuard

**Executive Summary:** This document provides an overview of the Common Vulnerabilities and Exposures (CVE) program, describing CVE identifiers and purpose, the Common Vulnerability Scoring System (CVSS), governance and sponsors (CVE Board, CNAs, MITRE, CISA), how vulnerabilities are added and referenced, and how CVE interoperates with vulnerability databases such as the NVD to help organizations identify and remediate security flaws.