Nonetheless, that doesn’t imply that everybody is celebrating EUVD’s arrival.
“The creation of EUVD is a mixture of good and unhealthy traits,” mentioned Morey J. Haber, chief safety advisor at safety vendor BeyondTrust. “This can be a complementary service that might enhance response occasions and bridge gaps in CVE protection,” he mentioned, however “dropping MITRE CVE as a world authority is disheartening.”
Whereas Haber mentioned that treating the CVE system as a “single supply of fact” is now not viable in a globalized vulnerability setting, the arrival of the EUVD “may create scoring conflicts, danger prioritization points, and conflicts inside multinational organizations making an attempt to remediate software program flaws.”