CVE and NVD Relationship


CVE and NVD Are Two Separate Programs


The CVE List was launched by MITRE as a community effort in 1999, and the U.S. National Vulnerability Database (NVD) was launched by the National Institute of Standards and Technology (NIST) in 2005.

While separate, both CVE and NVD are sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security, and both are available to the public and free to use.


Page Last Updated or Reviewed: December 28, 2017