# CNAScorecard.org Measures CVE Data Quality and Completeness

DevFeed: [CNAScorecard.org Measures CVE Data Quality and Completeness](<https://devfeed.tech/articles/a-new-era-of-transparency-for-cve-data-quality-27474.md>)

Original publisher: [Read original article](<https://jerrygamblin.com/2025/08/14/a-new-era-of-transparency-for-cve-data-quality/>)

Author: jgamblin

Published: 2025-08-14T00:43:12Z

Content type: opinion

Language: en

Sources: [Jerry Gamblin](<https://devfeed.tech/sources/jerry-gamblin.md>)

Topics: [Data Quality](<https://devfeed.tech/topics/data-quality.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [NVD](<https://devfeed.tech/topics/nvd.md>)

Tags: [alert-fatigue](<https://devfeed.tech/tags/alert-fatigue.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-data](<https://devfeed.tech/tags/cve-data.md>), [data-quality](<https://devfeed.tech/tags/data-quality.md>), [nvd](<https://devfeed.tech/tags/nvd.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

The article introduces CNAScorecard.org, a public scorecard intended to measure the quality and completeness of CVE data supplied by CVE Numbering Authorities. It describes missing or incomplete weakness, product, severity, and fix information as a practical vulnerability-management problem, and connects the effort to the NVD backlog.

## Source excerpt

I'm incredibly excited to finally share something I've been pouring my heart into at RogoLabs. For those of you who caught my talk at BSidesLV, you got a sneak peek, but today it's official: CNAScorecard.org is live! For years, the CVE program has been our shared language for identifying vulnerabilities. But lately, we've all felt ... Read more