Authorized Data Publisher

An ADP is a body in the Common Vulnerabilities and Exposures (CVE) programme that may enrich existing CVE records with additional data without having assigned them. The best-known example is Cybersecurity and Infrastructure Security Agency (USA) (CISA) with „Vulnrichment“, which adds Common Vulnerability Scoring System (CVSS) scores, Common Weakness Enumeration (CWE) mappings and Stakeholder-Specific Vulnerability Categorization (SSVC) assessments. This way even records with a thin vendor description receive an assessment.