Search | ENISA

Economics of Vulnerability Disclosure

Publications 14 December, 2018

Vulnerability disclosure refers to the process of identifying, reporting and patching weaknesses of software, hardware or services that can be exploited. The different actors within a vulnerability disclosure process are subject to a range of…

Good Practice Guide on Vulnerability Disclosure. From challenges to recommendations

Publications 18 January, 2016

Vulnerabilities are ‘flaws’ or ‘mistakes’ in computer-based systems that may be exploited to compromise the network and information security of affected systems. They provide a point-of-entry or gateway to exploit a system and as such pose…

State of Vulnerabilities 2018/2019 - Analysis of Events in the life of Vulnerabilities

Publications 14 January, 2019

The purpose of this report is to provide an insight on both the opportunities and limitations the vulnerability ecosystem offers. By using the vulnerabilities published during the year of 2018 and Q1-Q2 of 2019 as a vehicle, this report goes beyond…

Developing National Vulnerabilities Programmes

Publications 16 February, 2023

Based on the experiences and perspectives gathered from industry players and national governments, as well as on the documentation developed by multiple actors involved with national vulnerability initiatives and programmes, the EU Coordinated…

European Vulnerability Database

Tools 10 September, 2025

Visual with an attention sign and logos of ENISA, European Commission, and CERT-EU, with the text: 'Joint statement – Assessment and advice on Microsoft SharePoint Server.'

Joint Statement on SharePoint vulnerabilities - Assessment and advice on recovery and mitigating actions

News 22 July, 2025

The European Commission, the EU Agency for Cybersecurity (ENISA), the Cybersecurity Service for the Union institutions, bodies, offices and agencies (CERT-EU), and the network of the EU CSIRTs, are closely…

European Union Vulnerability Database - promotional image

Consult the European Vulnerability Database to enhance your digital security!

News 13 May, 2025

The European Union Agency for Cybersecurity (ENISA) has developed the European Vulnerability Database - EUVD as provided for by the NIS2 Directive. The EUVD service, to be maintained by ENISA, is now…

Shield with lock icon. ENISA is a common vulnerabilities and exposures Numbering authority

Another step forward towards responsible vulnerability disclosure in Europe

News 12 June, 2024

The EU Agency for Cybersecurity (ENISA) expands its support to EU CSIRTs for Coordinated Vulnerability Disclosure and is now authorised as a Common Vulnerabilities and Exposures (CVE) Numbering Authority.

Cybersecurity Investment: Spotlight on Vulnerability Management

News 16 November, 2023

The new report of the European Union Agency for Cybersecurity (ENISA) confirms investment continues to grow but stresses the importance of vulnerability management.

Coordinated Vulnerability Disclosure: Towards a Common EU Approach

News 16 February, 2023

The new report of the European Union Agency for Cybersecurity (ENISA) explores how to develop harmonised national vulnerability programmes and initiatives in the EU.

By Topics

By Type