Common Vulnerabilities and Exposures (CVE)

Common Vulnerabilities and Exposures, or CVE, is an internationally used system for uniquely identifying publicly known IT security vulnerabilities. Each recorded vulnerability receives an individual CVE ID, such as CVE-2025-12345. This enables vendors, IT security teams and security solutions to identify the same vulnerability consistently and exchange related information. CVE records provide basic information about a specific security vulnerability and serve as references for further technical details, security assessments and available updates. The CVE programme is operated by the MITRE Corporation and supported by numerous organisations and technology vendors. For businesses, CVE information is particularly relevant to vulnerability management and patch management, helping identify known weaknesses within IT infrastructures and initiate appropriate security measures.