B
CVE Numbering Authority
ENISA EU Agency for Cybersecurity (ENISA)
- Country
- Greece
- Organization type
- Consortium
- Program role
- Root,CNA
- Root
- mitre
- Scope
- Root Scope: European Union (EU) member states/EU authorities, EU CSIRTs network members, and cooperative partners under ENISA’s mandate as well as other CNAs who choose ENISA as their Root. CNA Scope: Vulnerabilities in information technology (IT) products discovered by European Union (EU) Computer Security Incident Response Teams (CSIRTs) or reported to ENISA or to EU CSIRTs for coordinated disclosure, as long as they do not fall under a CNA with a more specific scope.
80.01/100 over 40 records
in the last 180 days
· 75.2/100 over 76 all-time
The rules, last 180 days
Share of the records earning each credit, and the points it is worth.
Describe: can a reader tell what the vulnerability is?
24.47 / 25Description
An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
98% · 9.85/10
Title
A title.
92% · 4.62/5
Cwe
A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
100% · 10.0/10
Scope: can a reader tell whether they are affected?
18.88 / 25Affected
An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
100% · 10.0/10
Versions
An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
100% · 8.0/8
Cpe
A CPE on an affected entry, or a cpeApplicability block.
12% · 0.88/7
Assess: can a reader tell how bad it is?
19.62 / 25Severity
A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
100% · 15.0/15
Modern severity
A CVSS v4 vector or an SSVC decision.
62% · 3.12/5
Impacts
An impacts entry (a CAPEC identifier or an impact description).
30% · 1.5/5
Act: can a reader tell what to do about it?
17.03 / 25References
At least one reference.
100% · 7.0/7
Reference tags
At least one reference carrying tags.
95% · 4.75/5
Remediation
A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
40% · 3.16/8
Solutions
A solution or a workaround.
42% · 2.12/5
Context, not score
- Severity supplied by an ADP
- 0% (0 records)
- Weakness supplied by an ADP
- 0% (0 records)
- No severity statement
- 0%
- Descriptions under 100 characters
- 0%
- Known exploited
- 0
- Reservation to publication
- median 51.2 days · p90 204.9 days
- Rejected records
- 2
Score per publication year
| 2026 | 76.66 | 48 |
| 2025 | 72.83 | 26 |
| 2024 | 71.0 | 2 |
Badge