E
CVE Numbering Authority

mitre

26.58/100 over 2,339 records in the last 180 days · 21.12/100 over 115,096 all-time
The rules, last 180 days Share of the records earning each credit, and the points it is worth.

Describe: can a reader tell what the vulnerability is?

10.81 / 25
Description
An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
87% · 8.69/10
Title
A title.
0% · 0.0/5
Cwe
A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
21% · 2.12/10

Scope: can a reader tell whether they are affected?

4.83 / 25
Affected
An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
21% · 2.12/10
Versions
An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
21% · 1.7/8
Cpe
A CPE on an affected entry, or a cpeApplicability block.
14% · 1.01/7

Assess: can a reader tell how bad it is?

3.72 / 25
Severity
A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
24% · 3.62/15
Modern severity
A CVSS v4 vector or an SSVC decision.
2% · 0.1/5
Impacts
An impacts entry (a CAPEC identifier or an impact description).
0% · 0.0/5

Act: can a reader tell what to do about it?

7.23 / 25
References
At least one reference.
100% · 7.0/7
Reference tags
At least one reference carrying tags.
2% · 0.09/5
Remediation
A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
1% · 0.08/8
Solutions
A solution or a workaround.
1% · 0.06/5
Context, not score
Severity supplied by an ADP
75% (1761 records)
Weakness supplied by an ADP
78% (1830 records)
No severity statement
76%
Descriptions under 100 characters
4%
Known exploited
14 · 5 published without a severity
Reservation to publication
median 54.0 days · p90 296.0 days
Rejected records
38
Score per publication year
1999: 19.08 (320 records) 2000: 20.19 (1437 records) 2001: 21.44 (1323 records) 2002: 21.82 (1690 records) 2003: 22.85 (1223 records) 2004: 23.26 (1612 records) 2005: 21.16 (6302 records) 2006: 21.83 (6355 records) 2007: 21.99 (6730 records) 2008: 22.09 (5038 records) 2009: 22.09 (4899 records) 2010: 22.15 (2831 records) 2011: 22.49 (2086 records) 2012: 22.28 (2107 records) 2013: 22.51 (1234 records) 2014: 22.26 (2655 records) 2015: 22.56 (2031 records) 2016: 23.14 (1647 records) 2017: 21.83 (6611 records) 2018: 21.25 (7290 records) 2019: 20.9 (7730 records) 2020: 22.38 (7221 records) 2021: 21.46 (6473 records) 2022: 19.18 (7612 records) 2023: 15.92 (6237 records) 2024: 16.02 (5910 records) 2025: 22.24 (5203 records) 2026: 24.74 (3289 records)
202624.743,289
202522.245,203
202416.025,910
202315.926,237
202219.187,612
202121.466,473
202022.387,221
201920.97,730
201821.257,290
201721.836,611
201623.141,647
201522.562,031
201422.262,655
201322.511,234
201222.282,107
201122.492,086
201022.152,831
200922.094,899
200822.095,038
200721.996,730
200621.836,355
200521.166,302
200423.261,612
200322.851,223
200221.821,690
200121.441,323
200020.191,437
199919.08320
Badge

Embed the current grade; it follows the rolling window and reads "unranked" under the threshold.

[![mitre scorecard](https://vulnerability.circl.lu/assigners/mitre/badge.svg)](https://vulnerability.circl.lu/assigners/mitre)