Enisa said the new EU vulnerability database will supplement the CVE program rather than compete with it.

However, this does not mean that everyone is celebrating the arrival of EUVD.

“The creation of EUV is a mix of good and bad traits,” said Morey J. Haber, chief security consultant at security provider Beyond Trust. “It’s a complementary service that improves CVE’s response time and bridge gaps.

Haber said that treating CVE systems as “single truth” is no longer feasible, but in a globally vulnerable environment, the arrival of EUVD “can create rating conflicts, risk prioritization issues, and conflicts among transnational organizations trying to remedy software flaws.”