I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.
Usually it'll be the other way around, a scanner will have a list of known CVEs and how to test for them. It will then give you a filtered version of that list based on which vunerabilities apply to the system under test.
CVE codes are maintained and assigned by the MITRE Corporation.
1If you look at the CVE identifiers section, CVE codes are assigned by CVE numbering authorities. While MITRE is the primary numbering authority, there are others. Dec 2, 2019 at 22:49
Which means this answer basically repeats the first answer– schroeder ♦Dec 2, 2019 at 23:07