As organizations face increasing cybersecurity threats, the Common Vulnerabilities and Exposures (CVE) Program marks its 25th anniversary, highlighting its role in coordinated vulnerability management.

Launched in 1999, the CVE Program has transformed how cybersecurity vulnerabilities are identified and managed. This initiative now connects over 400 CVE Numbering Authorities (CNAs) from 40 countries, producing more than 240,000 CVE Records. These records serve essential functions in various industries and inform numerous security advisories.

“As we reflect on this historic milestone, we recognize the collective efforts of hundreds of organizations and thousands of individuals across our diverse partner community that contributed to making the CVE Program a success,” said Kent Landfield and Lisa Olson on behalf of the CVE Board.

Cybersecurity and Infrastructure Security Agency (CISA) Associate Director Sandra Radesky stated, “We are committed to working with the CVE Program’s community of international stakeholders to reduce cybersecurity risk by addressing the prevalence and impact of vulnerabilities across enterprises and technologies.”

Yosry Barsoum, Vice President of the Center for Securing the Homeland at MITRE, emphasized the importance of collaboration within the CVE Program, stating, “Its collaborative approach brings together experts in industry, government, and academia across the globe to create a common and scalable vulnerability identification standard.”

Looking to the future, the CVE Program aims to enhance its impact by broadening its community and enriching the quality of CVE Records. As it reflects on 25 years of progress, it invites cybersecurity professionals and researchers to contribute to its objectives.

The CVE Program's anniversary underscores the critical role it plays in fostering a unified approach to cybersecurity, essential for addressing evolving digital threats.