The European Union has launched a new vulnerability database aimed at providing aggregated cybersecurity issue information, functioning more as a notification platform than a traditional repository. The platform is similar in purpose to the U.S. CVE program, but ENISA is currently in discussions with MITRE regarding the program’s funding and future.
Affected: European Union, ENISA, MITRE, U.S. Cybersecurity and Infrastructure Security Agency (CISA)
Affected: European Union, ENISA, MITRE, U.S. Cybersecurity and Infrastructure Security Agency (CISA)
Keypoints
- The EU launched a new vulnerability database to share cybersecurity issue information.
- The platform acts primarily as a notification system rather than a traditional vulnerability repository.
- It is modeled after the U.S. CVE program but differs in its approach and scope.
- ENISA is in discussions with MITRE about the funding and management of the CVE program.
- The U.S. CISA extended MITRE’s contract to operate the CVE program for at least another 11 months.
- Concerns exist over the potential lapse of the CVE program if funding is not renewed.
- Historical CVE data will be accessible on GitHub if the program ends.
Read More: https://therecord.media/eu-launches-vulnerability-database