Glossary

Glossary. CISA: Cybersecurity and Infrastructure Security Agency, the US federal agency that runs the KEV catalog and sets the federal patch deadlines. CVE: Common Vulnerabilities and Exposures, a public identifier for one specific bug. CWE: Common Weakness Enumeration, the class the bug belongs to. CVSS: Common Vulnerability Scoring System, severity 0-10 as scored by the vendor, 9.0 and up is critical. EPSS: Exploit Prediction Scoring System, the estimated chance, updated daily, that this CVE is exploited within 30 days. KEV: CISA's Known Exploited Vulnerabilities catalog, bugs confirmed to be exploited in the wild with a US federal patch deadline. N/13: position in the series.

Back to the catalog