Nonetheless, that doesn’t imply that everybody is celebrating EUVD’s arrival.
“The creation of EUVD is a mixture of good and dangerous traits,” stated Morey J. Haber, chief security advisor at security vendor BeyondTrust. “It is a complementary service that might enhance response occasions and bridge gaps in CVE protection,” he stated, however “shedding MITRE CVE as a worldwide authority is disheartening.”
Whereas Haber stated that treating the CVE system as a “single supply of reality” is not viable in a globalized vulnerability atmosphere, the arrival of the EUVD “might create scoring conflicts, danger prioritization points, and conflicts inside multinational organizations trying to remediate software program flaws.”