How to read a CVE Bestiary Card

How to read a CVE Bestiary Card. CLASS: the weakness class (CWE family); the kind of bug, such as memory corruption or SQL injection. PREY: the software it preys upon. ATTACK: mechanism and severity (as indicated by CVSS, a 0-10 severity score). COUNTER-ATTACK: the fix, if it exists. Red stamp: the bug is being exploited in the wild already (in CISA's KEV catalog). Footer: CVE IDs, CVSS, EPSS percentile, KEV status, advisory link, N/13.

Back to the catalog