Security News > 2024 > May > NIST says NVD will be back on track by September 2024

The NVD started slowing down its CVE enrichment efforts earlier this year, and NIST confirmed that they are working on a multi-pronged solution that will include improved tools and methods, as well as establishing a consortium that will help addressed various challenges.

Tanya Brewer, program manager at the NVD, said in April that the NVD program is considering many changes to improve software identification, automate CVE analysis activities, make NVD data more easy to "Consume" and customize, develop capabilities to publish additional kinds of data, and more.

On May 20, NIST said that the NVD has started ingesting CVE 5.0 and CVE 5.1 records for CVEs on an hourly basis.

Ten days later came this latest and welcome promise: the NVD will be completely back on track by the end of September.

More welcome news is that NIST does not plan to hand over NVD's rains.

"With a 25-year history of providing this database of vulnerabilities to users around the world and given that we do not play an enforcement or oversight role, NIST is uniquely suited to manage the NVD. NIST is fully committed to maintaining and modernizing this important national resource that is vital to building and maintaining trust in information technology and fostering innovation," the US Department of Commerce agency said.

News URL

https://www.helpnetsecurity.com/2024/05/30/nist-nvd-back-on-track/