Tag
cpe
Safeguard articles tagged "cpe" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Concepts
What Is the NVD (National Vulnerability Database)?
The NVD is the U.S. government's enrichment layer on top of the CVE List, adding CVSS scores, CWE classifications, and affected-configuration data. Here is how it works and where it falls short.
Sep 30, 20256 min read
Vulnerability Management
CPE Naming Convention and the Vulnerability Matching Problem
CPE is the backbone of NVD vulnerability matching, and it is deeply flawed. Understanding its limitations is essential for accurate vulnerability management.
Jun 15, 20226 min read