CVEProject/cve-website

Update missing words and inconsistent ordering in ADPs.vue for the 9/10/24 release

Closed this issue · 1 comments

“Vulnrichment” updates (e.g., missing
<a href="https://www.first.org/cvss/" target="_blank">CVSS</a>,
<a href="https://cwe.mitre.org/" target="_blank">CWE</a>,
<a href="https://nvd.nist.gov/products/cpe" target="_blank">CPE</a>
information for CVE Records that meet specific threat characteristics)

to determine the missing CWE, CVSS, CPE metric, and add those metrics to the CISA ADP container on those CVE Records.

If a CNA later updates a CVE Record with their own CWE, CVSS, or CPE data, the CISA ADP will remove their assessed

etc.

Maybe it should be "CVSS, CWE, or CPE" in all cases? In other words, perhaps "or" could be inserted when missing, and either CVSS or CWE could be listed first in all situations.

Completed