CNA Name Matching Quality

How well CVE assigner names match the official CNA registry
Exact Matches
Perfect shortName match
Fuzzy Matches
Matched via normalization
Unmatched
No registry match found
Match Rate
Overall matching success

How Name Matching Works

This analysis uses CNAScorecard-style name matching to reconcile CVE assigner names with the official CNA registry. The matching process uses progressively relaxed strategies:

  • Exact Match: Direct shortName comparison
  • Case-Insensitive: Ignore letter casing differences
  • Organization Name: Match via full organization name
  • Normalized: Remove spaces, hyphens, underscores
  • Partial: Substring containment check

Unmatched CNAs may be historical assigners, deprecated organizations, or name variations not yet mapped.

Match Quality Distribution

CVEs by Match Type

Excluding exact matches for scale

Case Mismatches

CNAs using different letter casing than official registry
Name Used Official Name CVEs KEVs

Organization Name Matches

CNAs matched via organization name instead of shortName
Name Used Official ShortName CVEs KEVs

Normalized Matches

CNAs matched after removing spaces, hyphens, and underscores
Name Used Official Name CVEs KEVs

Partial Matches

CNAs matched via substring containment (lower confidence)
Name Used Possible Match CVEs Confidence

Unmatched CNAs

CVE assigners with no match found in official CNA registry
Name CVEs KEVs EPSS High Notes