Recent developments regarding the National Vulnerability Database (NVD) have some technology leaders on edge. Since February, the U.S. National Institute of Standards and Technology (NIST) has almost completely stopped enriching software vulnerabilities listed in its National Vulnerability Database (NVD), the world’s most widely used software vulnerability database.
Because of this, we understand many technology leaders have concerns about potential delays in vulnerability analysis efforts. The NVD recently stated:
There is a growing backlog of vulnerabilities submitted to the NVD and requiring analysis. This is based on a variety of factors, including an increase in software and, therefore, vulnerabilities, as well as a change in interagency support.
While it’s unclear on the exact reasons behind what’s going on regarding the NVD, we’re positive that NIST will bounce back strongly. However, the gap between enriched and pending analysis is increasing day by day. After crunching the numbers, we noticed that since NVD almost completely stopped on February 12, over 91% of vulnerabilities are awaiting analysis from the NVD.
Source: The National Vulnerability Database
Utilize reliable software vulnerability research
Having said that, Flexera’s Software Vulnerability Research (SVR), is completely unphased with these delays from the NVD. We recognize the importance of timely and accurate vulnerability intelligence for our customers. And we understand that delays in analysis efforts can impact decision-making and cybersecurity strategies. However, we want to assure you our solutions, powered by standardized, validated and enriched vulnerability intelligence from Secunia Research, remain unaffected by these challenges.
Expand software vulnerability coverage with diverse data sources
Since its inception in 2002, Flexera’s SVR has been committed to providing the most accurate and reliable source of vulnerability intelligence. Our dedication to excellence has enabled us to build a reputation for delivering unparalleled insights into the vulnerabilities of software applications. Unlike some solutions that rely solely on the NVD for vulnerability data, we use a diverse range of data sources to ensure comprehensive coverage and independence from any single provider. In addition to the NVD, we leverage vendor information, community data, threat feeds, dark web sources and our own dedicated Secunia Research team to gather intelligence on vulnerabilities across more than 70,000 products.
Our approach enables us to deliver a depth of detailed variables that empowers our customers to make informed decisions and prioritize remediation efforts effectively. By combining advisory-based research with advanced data analytics, we provide actionable insights that drive proactive cybersecurity measures.
Furthermore, Flexera’s SVR is trusted and implemented by some of the largest enterprises worldwide, covering over 10 million endpoints. Our solution’s track record speaks for itself, demonstrating our commitment to excellence and reliability in the ever-changing landscape of cybersecurity.
Leverage unparalleled software vulnerability intelligence
While challenges may arise in the vulnerability analysis landscape, you can rest assured that Flexera’s SVR remains steadfast in our mission to deliver uncompromising quality and accuracy in vulnerability intelligence. We stand ready to support you in your cybersecurity endeavors, providing the insights and solutions needed to mitigate risks effectively.
Learn more about how to leverage data in your vulnerability assessment practices.