CVE identifier
ID cve_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier that the CVE Program gives to a publicly disclosed cybersecurity vulnerability: CVE-, a four-digit year and a sequence number of at least four digits. The year is the year the vulnerability was discovered or the year the identifier was published. The CVE JSON 5 record format allows up to 19 digits in the sequence number. NVD, OSV.dev and the GitHub Advisory Database refer to vulnerabilities by their CVE identifier.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Wikidata
- P3587
- Quality
- 85/100 · missing: translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^CVE-[0-9]{4}-[0-9]{4,19}$Python re syntax.
Examples
| Value | Description |
|---|---|
| CVE-2021-44228 | Remote code execution through JNDI lookups in Apache Log4j 2 (Log4Shell) |
| CVE-2014-0160 | OpenSSL TLS heartbeat information disclosure (Heartbleed) |
| CVE-2021-34527 | Windows Print Spooler remote code execution; five-digit sequence number |
| CVE-2021-123 invalid | Sequence number has fewer than four digits |
| CVE-21-44228 invalid | Two-digit year |
Sources
- wikipedia: https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
- doc: https://github.com/CVEProject/cve-schema/blob/main/schema/CVE_Record_Format.json
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/cve_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/cve_id.yamlon GitHub