The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by
MITRE Corporation and the
National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the
Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from
FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by
MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the
NVD.