New answers tagged

1

The National Vulnerability Database (NVD) already maps CVEs to CWEs so have done a lot of the work for you. See: https://nvd.nist.gov/vuln/data-feeds for JSON and XML feeds that you can process progrmmatically. Here's a snippet from the JSON feed: "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { ...


1

CWE and CVE are very different things, which can't really be mapped arbitrarily from one to the other. CWE is a categorization system for vulnerability types, while CVE is a reference to a specific vulnerability. But a specific vulnerability can be references by a CVE and also be categorized via CWE (something the researcher who discovered the issue or the ...


Top 50 recent answers are included