Colleagues, The CVE Program is happy to announce three (3) new CNAs: Organization Name: ClickHouse, Inc. Org Short Name: ClickHouse Organization Location: USA Scope: ClickHouse-owned products, not including end-of-life components. Top-Level Root: MITRE Disclosure Policy location: https://github.com/ClickHouse/ClickHouse/security Advisory location: https://clickhouse.com/docs/en/whats-new/security-changelog Public point of contact: secur...@clickhouse.com<mailto:secur...@clickhouse.com> CNA Type: Vendor, Open Source Organization Name: ConnectWise LLC Org Short Name: ConnectWise Organization Location: USA Scope: All ConnectWise products and services and vulnerabilities discovered by ConnectWise in third party products that are not within another CNA’s scope. Top-Level Root: MITRE Disclosure Policy location: https://www.connectwise.com/company/trust/security/vulnerability-disclosure-policy Advisory location: https://www.connectwise.com/company/trust/security-bulletins, https://www.connectwise.com/company/trust/advisories Public point of contact: disclos...@connectwise.com<mailto:disclos...@connectwise.com>, https://www.connectwise.com/company/trust CNA Type: Vendor, Researcher Organization Name: SBA Research gGmbH Org Short Name: sba-research Organization Location: Austria Scope: Vulnerabilities discovered by SBA Research or reported to SBA Research by partner organizations that are not in another CNA’s scope. Top-Level Root: MITRE Disclosure Policy location: https://www.sba-research.org/about/vulnerability-disclosure-policy/ Advisory location: https://github.com/sbaresearch/advisories Public point of contact: advis...@sba-research.org<mailto:advis...@sba-research.org> CNA Type: Researcher
Total CNAs: 382 CNAs (380 CNAs and 2 CNA-LRs) Total Countries: 40 (+ 1 no country affiliation) Respectfully, CVE Program Secretariat cve-prog-secretar...@mitre.org<mailto:cve-prog-secretar...@mitre.org> [A picture containing text, clipart Description automatically generated]
