|
|
On Wed, 15 Nov 2017, Art Manion wrote: : (*) YYYY is meant to be the year the vulnerability (not the CVE ID) was : published, right? Not year the CVE ID was requested, assigned, or : published? Correct. That was the long-standing premise as I understand it, and as various CVE folks had told me over the years.