I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.

2 Answers 2


Usually it'll be the other way around, a scanner will have a list of known CVEs and how to test for them. It will then give you a filtered version of that list based on which vunerabilities apply to the system under test.


CVE codes are maintained and assigned by the MITRE Corporation.

Wikipedia - CVE Codes

  • 1
    If you look at the CVE identifiers section, CVE codes are assigned by CVE numbering authorities. While MITRE is the primary numbering authority, there are others. Commented Dec 2, 2019 at 22:49
  • Which means this answer basically repeats the first answer
    – schroeder
    Commented Dec 2, 2019 at 23:07

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .