CVE Terms Scorecard

Grade A- — Mostly protective (score 86/100)

The terms grant a perpetual, irrevocable license to user submissions, but the document is otherwise free of common predatory clauses like forced arbitration or data sale.

Broad content license, but no data sale or arbitration clauses.

Terms at a glance

Sells your data
NO
Forced arbitration
NO
Trains AI on your content
NO
Collects biometric data
NO
Shares data with government
NO
Easy to cancel
UNCLEAR
Tells you before changes
UNCLEAR
Deletes data on request
UNCLEAR

What the terms actually say

License — Submissions

For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and…

You give MITRE and its partners a permanent, free, and unchangeable right to use, modify, and share anything you submit to the CVE database.

Disclaimers

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN AS IS BASIS AND THE CONTRIBUTOR... DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED

The company provides all information without any guarantee that it is accurate, useful, or safe to use.

Last reviewed 2026-08-02 under rubric v3.5.

Other scorecards