CVE Program Technical Workshop 2025 – Day 01, Session 04
Session Speakers: Steve Christey Coley and Connor Mullaly
Summary: Mapping CVEs to their root cause CWEs is an important, yet sometimes difficult activity. Two Common Weakness Enumeration (CWE™) team members discuss best practices, guidance, and common pitfalls seen in root cause mapping to help CVE Numbering Authorities (CNAs) arrive at the most accurate CWEs.
https://cwe.mitre.org/
https://cwe.mitre.org/documents/cwe_usage/guidance.html
https://www.cve.org/
https://www.cve.org/AllResources/CveServices#CveRecordFormat
https://www.cve.org/ProgramOrganization/CNAs