What were the updates?
The changes were made based on several criteria including severity, exploitation, and prevalence, among others.
Issues that are rarely exploited or don’t cause much harm have been left out of the list.
This list was updated by the Homeland Security Systems Engineering and Development Institute (HSSEDI).
“We shifted to a data-driven approach because it enables a more consistent and repeatable analysis that reflects the issues we are seeing in the real world. We will continue to mature the methodology as we move forward,” said Chris Levendis, CWE project leader.