Watch all the informational videos from the CNA onboarding documentation. Approximately an hour of content about the program, becoming a CNA, assigning CVE IDs, and creating CVE records. Slides are available on the website.
- CVE Program Overview (5 minutes)
- Becoming a CNA (15 minutes)
- Assigning CVE IDs (26 minutes)
- CVE Record Creation (7 minutes)
We will be using CVE Services to manage CVE IDs and records. CVE Services is essentially a set of APIs around the CVE database to manage a CNAs' block of CVE IDs and records.
Watch the following videos:
- Getting a CVE Services Account (10 minutes)
- CVE Record Workflow (6 minutes)
- Demo on Vulnogram, an open source CVE Services client UI (10 minutes)
There are optional videos available with a historical overview of CVE Services and deep-dive into CVE Record JSON 5 format. You don't have to watch these, but if you're interested they are there:
- Introduction to CVE Services (37 minutes)
- CVE JSON 5 Format (45 minutes)
There is a list of rules for all CNAs published by CVE. Many of these rules apply to CNAs which aren't sub-CNAs like the PSF. The rules that do apply to Sub-CNAs are documented in these sections, read each of these: