备注:CVE、NVD是:指望cf

:>许多业内人士的另一个问题,是额外的一天或三:>之间的延迟CVE作业和CVSS得分。如果CVE那些分析师:>他们可以得到一个分数隶属于更快的CVE作业,:>没有通过《每日推送数据NVD然后推动它:>英航。::两件事。::首先,这只是我个人的看法,但我认为结合CVE和NVD很:对CVE不利。::CVE漏洞生命周期比经营进一步上游:NVD,我们应该期待。CVE分析工作的核心是:IDs的任务在一个相当一致的水平。我们需要这样做:尽快我们可以同时保持足够的质量描述:系统可搜索。::NVD是相关的分析工作,但不同的。他们专注:更多的平台和CVSS评分的影响。这是第二个:阶段的分析工作,并试图这样做同时CVE:分析只会减缓CVE出版——:显著。 I disagree. You appear to assume that in the proposed combining of resources, that a CVE entry could only be pushed with this information. I did not (mean to) imply that at all. A CVE could be pushed live, and then a second analysis team could come behind them and add CVSS and CPE information. This would still save a day in data syncing, and reduce extra middle management, freeing up money for more analysts.