The National Cybersecurity FFRDC, operated by the MITRE Corporation, maintains the system, with funding from the National Cyber Security Division of the United States Department of Homeland Security. The Security Content Automation Protocol uses CVE, and CVE IDs are listed on MITRE Corporation's system[2] as well as in the US National Vulnerability Database.
CVE prefix + Year + Arbitrary DigitsNote: Year maybe more than 4 digits to accomodate years beyond 9999.
- based on information obtained 2016-08-27-