The European Union Agency for Cybersecurity (Enisa) has unveiled a new European Union Vulnerability Database (EUVD) to provide consolidated and reliable information on cyber security vulnerabilities in IT products and services.
The EUVD, mandated by the NIS2 Directive, gathers information from various sources such as EU member state national computer security incident response teams (CSIRTs) and industry threat researchers. Enisa has designed the platform to be interconnected, allowing for better analysis and correlation of vulnerabilities.
Henna Virkkunen, European Commission executive vice-president, praised the database as a major step towards reinforcing Europe’s security and resilience. Enisa executive director Juhan Lepassaar highlighted the importance of the database in managing vulnerabilities and associated risks.
The launch of the EUVD comes in the wake of uncertainty surrounding Mitre’s CVE Program, prompting discussions about alternatives to the US government-backed resource. While the EUVD is not meant to replace the CVE Program, it aims to complement it by working alongside Mitre to understand the impact of funding issues.
Industry experts like Sylvain Cortes from Hackuity and Crystal Morin from Sysdig have welcomed the EUVD as a valuable addition to the cyber security landscape. They believe that having multiple trusted sources for vulnerability intelligence will enhance the overall security posture and speed up public disclosure of vulnerabilities.
Overall, the EUVD promises to be a transparent and reliable source of information for both public and private sector stakeholders, contributing to a more secure digital environment in Europe.