Which organization maintains the Common Vulnerabilities and Exposures (CVE) repository?

• A. NIST
• B. CERT
• C. Mitre Corporation
• D. IEEE

Answer: (C)

MITRE Corporation maintains the CVE repository. CVE provides a universal identifier for publicly known vulnerabilities, and MITRE runs the CVE List along with the process for issuing new CVEs, ensuring one consistent ID per vulnerability across disclosures. The National Vulnerability Database, run by NIST, is a separate catalog that aggregates CVEs and adds metrics like CVSS scores and references, but it relies on the CVE identifiers created and maintained by MITRE. CERT/CC and IEEE are not responsible for maintaining the CVE list.