CVE reports have been further enhanced

CVE reports have been further enhanced

Enhanced Accessibility and Detail in CVE Reports

We are pleased to announce that it is now possible to access each CVE report on its own dedicated page. This improvement aims to enhance readability over the previous pop-up format, which offered limited formatting options. By simply clicking on a row within the "All CVEs" table on our homepage, users will be redirected to the detailed CVE report.

Each CVE report now includes comprehensive details related to the CVSS score. This includes the vector string, a compact representation of various metrics:

  • Attack Vector (AV): Indicates how an attacker can access the vulnerable system, with options such as "Local", "Adjacent Network", or "Network".
  • Attack Complexity (AC): Reflects the difficulty level for an attacker to exploit the vulnerability, categorized as "Low", "Medium", or "High".
  • Privileges Required (PR): Specifies the level of privileges necessary for an exploitation, possible values are "None", "Low", or "High".
  • User Interaction (UI): Identifies if user interaction is needed to exploit the vulnerability, with options "None", "Required", or "Unspecified".
  • Scope (S): Describes the impact range of the vulnerability on the system, either "Unchanged" or "Changed".
  • Confidentiality (C), Integrity (I), and Availability (A) Impact: These metrics evaluate the potential effects on data confidentiality, integrity, and availability, each rated as "None", "Low", "High", or "Unspecified".

In addition, CVE reports include metrics for exploitability and overall impact, which can be complex to understand individually. However, to facilitate better comprehension, future CVE reports will be augmented by Large Language Models (LLMs) like ChatGPT, which will provide concise advice and interpretations.