Skip to content

CNA information difficult to obtain without scraping and parsing all CVEs #69

@nisamson

Description

@nisamson

There is a mapping between some GUIDs and CNAs that exists in the providerMetadata fields, e.g.

"providerMetadata": {
  "dateUpdated": "2022-07-03T22:16:27",
  "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
  "shortName": "ibm"
}

However, there doesn't appear to be a way to gather a mapping of these organizational IDs or a clear way to get additional information about them, e.g. a contact email or a longer form name. It would be very useful to have a dictionary of this information for correlation with some downstream consumers of the CVE.org data like NIST NVD who are currently just using the UUID when they publish their information.

Additionally, even though it is public, there is no way of programmatically obtaining the contact information for or the name of a CNA even though this information is public without scraping the CVE.org website (if there is, please correct me; I can't find any indication of such an offering existing).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions