CVE (Common Vulnerabilities and Exposures)

CVE is a dictionary of publicly disclosed vulnerabilities, each assigned a unique identifier such as CVE-2024-12345 by a CVE Numbering Authority. The identifier itself carries no severity information — it exists purely to give researchers, vendors, and security tools a shared reference for the same underlying flaw, so a finding reported by one scanner can be matched against a patch note from a vendor or a discussion in a security advisory without ambiguity. In a VAPT platform like Venstap, CVE identifiers attached to scan findings let an analyst quickly pull outside context — proof-of-concept exploits, vendor patches, exploitability discussion — without needing to re-research a vulnerability that has already been publicly documented.