CVE
A standardized identifier assigned to a publicly disclosed cybersecurity vulnerability so references can be correlated across tools and advisories.
Threat-Model Boundary
A CVE identifier names a vulnerability record; it is not a severity score and does not by itself indicate exploitability in a specific deployment.
Related Security Concepts
- CWE
- CVSS
- Vulnerability Management
- Software Bill of Materials
Source
- https://csrc.nist.gov/glossary/term/CVE