-
Notifications
You must be signed in to change notification settings - Fork 41
Open
Description
Proposed New Idea/Feature (required)
Many CVEs are reported as having the "product" field set to "N/A". At the same time many of these have a description text (descriptions/value) where a product is described in free text form.
I believe that the "product" field is commonly used with scanners that automatically tries to match CVEs to the contents of an SBOM or similar.
It would be beneficial if the product field could be populated with a valid product name. Perhaps a script can be made to identify CVEs which have a N/A product but still describes a product within a free text field. The next step would be to introduce the correct value in the product field.
Is it viable to force a valid product name when creating new CVEs even?
Additional Notes (Optional)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels