CISA proposes improvements to CVE data quality

CISA has published a plan to improve the quality of data in the CVE program.

Experts interviewed by CyberScoop question whether it addresses software identifiers and missing baseline metrics.