CVE and NVD Relationship

CVE and NVD Are Two Separate Programs

The CVE List was launched by MITRE as a community effort in 1999, and the U.S. National Vulnerability Database (NVD) was launched by the National Institute of Standards and Technology (NIST) in 2005.

While separate, both CVE and NVD are sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security, and both are available to the public and free to use.

Page Last Updated or Reviewed: December 28, 2017