Measuring CVE Performance Vuln4Cast 2024, Ben Edwards
https://bjedwards.observablehq.cloud/measuring-cna-performance/

CVE is Federated

CNA data is somewhat disorganized

304 With CVEs in MITRE's CVEv5 list and on the cve.org website

50 With CVEs in the MITRE CVEv5 list, but not listed on the cve.org website

97 On the cve.org website, but with no active CVEs

No definitive data from when CNAs appear or disappear

Several different IDs

CNA-ID (CNA-YYYY-XXXX)

Assigner ID (UUID)

Assigner Name