Merge pull request #3590 from CVEProject/int

6/23/25 Release: INT to MAIN

Author: rroberge

public/images/cveboard/JenE.jpg

@@ -2447,8 +2447,12 @@
       "alerts": [],
       "advisories": [
         {
-          "label": "Advisories",
-          "url": "https://trust.arcgis.com/"
+          "label": "Trust Center",
+          "url": "https://trust.arcgis.com/en/"
+        },
+        {
+          "label": "Security Advisories",
+          "url": "https://www.esri.com/arcgis-blog/?s=#&products=trust-arcgis"
         }
       ]
     },
@@ -7485,7 +7489,7 @@
     "shortName": "SICK_AG",
     "cnaID": "CNA-2019-0016",
     "organizationName": "SICK AG",
-    "scope": "SICK AG issues only.",
+    "scope": "SICK AG issues and issues in EHS products (when related to the Endress+Hauser SICK (EHS) joint venture).",
     "contact": [
       {
         "email": [
@@ -26355,5 +26359,70 @@
       ]
     },
     "country": "USA"
+  },
+  {
+    "shortName": "TRO",
+    "cnaID": "CNA-2025-0028",
+    "organizationName": "Teradyne Robotics",
+    "scope": "All products released by Teradyne Robotics subsidiaries, Universal Robots (UR) and Mobile Industrial Robots (MiR), including both actively supported and end-of-life/end-of-service products, as well as vulnerabilities in third-party software identified by Teradyne Robotics that are outside the scope of another CNA.",
+    "contact": [
+      {
+        "email": [
+          {
+            "label": "Email",
+            "emailAddr": "productsecurity@teradyne-robotics.com"
+          }
+        ],
+        "contact": [],
+        "form": []
+      }
+    ],
+    "disclosurePolicy": [
+      {
+        "label": "UR Policy",
+        "language": "",
+        "url": "https://www.universal-robots.com/articles/coordinated-disclosure/"
+      },
+      {
+        "label": "MiR Policy",
+        "language": "",
+        "url": "https://mobile-industrial-robots.com/coordinated-disclosure"
+      }
+    ],
+    "securityAdvisories": {
+      "alerts": [],
+      "advisories": [
+        {
+          "label": "UR Advisories",
+          "url": "https://www.universal-robots.com/articles/?filter_Applications[]=226617&filters[]=226617"
+        },
+        {
+          "label": "MiR Advisories",
+          "url": "https://mobile-industrial-robots.com/security-advisories"
+        }
+      ]
+    },
+    "resources": [],
+    "CNA": {
+      "isRoot": false,
+      "root": {
+        "shortName": "icscert",
+        "organizationName": "Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)"
+      },
+      "roles": [
+        {
+          "helpText": "",
+          "role": "CNA"
+        }
+      ],
+      "TLR": {
+        "shortName": "CISA",
+        "organizationName": "Cybersecurity and Infrastructure Security Agency (CISA)"
+      },
+      "type": [
+        "Vendor"
+      ]
+    },
+    "country": "Denmark"
   }
 ]

src/assets/cve25thLogo.svg

@@ -12,7 +12,7 @@
           "subSectionId": "section_1-1_Background",
           "subSectionTitle": "Background",
           "subSectionParagraphs": [
-            "The <a href='/'>Common Vulnerabilities and Exposures (CVE&reg;) Program</a> is a voluntary, international, community-driven effort to identify, define, catalog, and share information about <a href='/ResourcesSupport/Glossary?activeTerm=glossaryPubliclyDisclosed'>Publicly Disclosed</a> cybersecurity <a href='/ResourcesSupport/Glossary?activeTerm=glossaryVulnerability'>Vulnerabilities</a>. A <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCVEID'>CVE Identifier (CVE ID)</a> and corresponding <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Record</a> enable multiple parties to discuss and share information with confidence that they are referencing the appropriate Vulnerability. This Vulnerability identification capability is fundamental to global Vulnerability management.",
+            "The <a href='/'>Common Vulnerabilities and Exposures (CVE&trade;) Program</a> is a voluntary, international, community-driven effort to identify, define, catalog, and share information about <a href='/ResourcesSupport/Glossary?activeTerm=glossaryPubliclyDisclosed'>Publicly Disclosed</a> cybersecurity <a href='/ResourcesSupport/Glossary?activeTerm=glossaryVulnerability'>Vulnerabilities</a>. A <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCVEID'>CVE Identifier (CVE ID)</a> and corresponding <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Record</a> enable multiple parties to discuss and share information with confidence that they are referencing the appropriate Vulnerability. This Vulnerability identification capability is fundamental to global Vulnerability management.",
             "Within the CVE Program, a <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCNA'>CVE Numbering Authority (CNA)</a> is an organization authorized to assign CVE IDs and publish CVE Records, ideally as part of the initial Public Disclosure of a Vulnerability. Benefits of participating in the CVE Program as a CNA include the ability to Publicly Disclose Vulnerabilities with pre-assigned CVE IDs and the first opportunity to assign CVE IDs for Vulnerabilities within the CNA’s <a href='/ResourcesSupport/Glossary?activeTerm=glossaryScope'>Scope</a> Definition. In addition to assigning CVE IDs, CNAs also create and publish information about the identified Vulnerability in its associated CVE Record.",
             "Many CNAs are <a href='/ResourcesSupport/Glossary?activeTerm=glossarySupplier'>Suppliers</a> who assign CVE IDs to and publish CVE Records for Vulnerabilities affecting <a href='/ResourcesSupport/Glossary?activeTerm=glossaryProduct'>Products</a> owned, developed, or maintained by the Supplier. Examples of CNAs include:",
             "<ul><li>Software and hardware Suppliers, including product security incident response teams (PSIRTs)</li><li>Open source software projects, maintainers, and foundations</li><li>Service providers</li><li>Vulnerability researchers</li><li>National computer security incident response teams (CSIRTs)</li><li>Vulnerability coordinators</li><li>Vulnerability databases</li><li>Bug bounty providers</li></ul>"

src/assets/data/CNAsList.json

@@ -39,6 +39,14 @@
       "organizationURL": "https://www.blackduck.com/",
       "role": "Board"
     },
+    {
+      "familyName": "Ellis",
+      "firstName": "Jen",
+      "imageURL": "JenE.jpg",
+      "organization": "NextJenSecurity",
+      "organizationURL": "https://uk.linkedin.com/in/infosecjen",
+      "role": "Board"
+    },
     {
       "familyName": "Emsweller",
       "firstName": "Patrick",
@@ -107,8 +115,8 @@
       "familyName": "Nandakumaraiah",
       "firstName": "Chandan",
       "imageURL": "ChandanN.jpg",
-      "organization": "Palo Alto Networks",
-      "organizationURL": "https://www.paloaltonetworks.com/",
+      "organization": "",
+      "organizationURL": "",
       "role": "Board"
     },
     {

src/assets/data/cnaRules.json

@@ -102,7 +102,7 @@
       "id": 31,
       "title": "CNA Rules v4.0 Q&A Webinar",
       "location": "Virtual",
-      "description": "<i>This event is limited to authorized representatives from <a href='/PartnerInformation/ListofPartners'>CVE Numbering Authority (CNA)</a> partners <strong>only</strong>.</i><br/><br/><strong>Time: </strong>11:00 AM - 12:30 PM EDT<br/><br/><strong>Registration: </strong>Available for CNA partners on the <a href='https://events.gcc.teams.microsoft.com/event/d96f8b09-6c1b-4227-acff-0e6feaf2adcc@c620dc48-1d50-4952-8b39-df4d54d74d82' target='_blank'>webinar website</a>.<br/><br/><strong>IMPORTANT: </strong>CNAs are encouraged to submit questions ahead of time via this <a href='https://forms.office.com/g/KDShHyZ197' target='_blank'>web form</a>.<br/><br/><strong>Purpose: </strong>The purpose of this <a href='/'>CVE® Program</a> webinar is to update <a href='/ProgramOrganization/CNAs'>CNAs</a> about the new and improved <a href='/Resources/Roles/Cnas/CNA_Rules_v4.0.pdf' target='_blank'>CNA Rules Version 4.0</a> (PDF).<br/><br/>Topics will include the ways the new rules might affect CNA processes in the short term, the benefits for CNAs moving forward, and the expected positive impact on the vulnerability management ecosystem.<br/><br/>CNAs, <a href='https://events.gcc.teams.microsoft.com/event/d96f8b09-6c1b-4227-acff-0e6feaf2adcc@c620dc48-1d50-4952-8b39-df4d54d74d82' target='_blank'>register today</a>!",
+      "description": "<i>This event is limited to authorized representatives from <a href='/PartnerInformation/ListofPartners'>CVE Numbering Authority (CNA)</a> partners <strong>only</strong>.</i><br/><br/><strong>Time: </strong>11:00 AM - 12:30 PM EDT<br/><br/><strong>Registration: </strong>Available for CNA partners on the <a href='https://events.gcc.teams.microsoft.com/event/d96f8b09-6c1b-4227-acff-0e6feaf2adcc@c620dc48-1d50-4952-8b39-df4d54d74d82' target='_blank'>webinar website</a>.<br/><br/><strong>IMPORTANT: </strong>CNAs are encouraged to submit questions ahead of time via this <a href='https://forms.office.com/g/KDShHyZ197' target='_blank'>web form</a>.<br/><br/><strong>Purpose: </strong>The purpose of this <a href='/'>CVE<sup>&trade;</sup> Program</a> webinar is to update <a href='/ProgramOrganization/CNAs'>CNAs</a> about the new and improved <a href='/Resources/Roles/Cnas/CNA_Rules_v4.0.pdf' target='_blank'>CNA Rules Version 4.0</a> (PDF).<br/><br/>Topics will include the ways the new rules might affect CNA processes in the short term, the benefits for CNAs moving forward, and the expected positive impact on the vulnerability management ecosystem.<br/><br/>CNAs, <a href='https://events.gcc.teams.microsoft.com/event/d96f8b09-6c1b-4227-acff-0e6feaf2adcc@c620dc48-1d50-4952-8b39-df4d54d74d82' target='_blank'>register today</a>!",
       "permission": "private",
       "url": "https://events.gcc.teams.microsoft.com/event/d96f8b09-6c1b-4227-acff-0e6feaf2adcc@c620dc48-1d50-4952-8b39-df4d54d74d82/registration",
       "date": {
@@ -635,4 +635,4 @@
       "url": "/Resources/Media/Archives/Events/1999_Events.pdf"
     }
   ]
-}
+}

src/assets/data/currentBoardMembersList.json

@@ -7,8 +7,8 @@
 				"questionId": "what_is_cve",
 				"questionText": "What is CVE",
 				"questionResponseParagraphs": [
-					"<i>The Common Vulnerabilities and Exposures (CVE<sup>®</sup>) Program is celebrating 25 years of impact in cybersecurity! Read the <a href='/Resources/Media/Cve25YearsAnniversaryReport.pdf'>CVE 25th Anniversary Report</a>.</i>",
-					"The mission of the Common Vulnerabilities and Exposures (CVE<sup>®</sup>) Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. See the <a href='/About/Overview'>Overview</a> page for additional information."
+					"<i>The Common Vulnerabilities and Exposures (CVE<sup>&trade;</sup>) Program is celebrating 25 years of impact in cybersecurity! Read the <a href='/Resources/Media/Cve25YearsAnniversaryReport.pdf'>CVE 25th Anniversary Report</a>.</i>",
+					"The mission of the Common Vulnerabilities and Exposures (CVE<sup>&trade;</sup>) Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. See the <a href='/About/Overview'>Overview</a> page for additional information."
 				]
 			},
 			{
@@ -75,14 +75,14 @@
 				"questionId": "who_owns_cve",
 				"questionText": "Who owns CVE",
 				"questionResponseParagraphs": [
-					"Copyright © 1999-2025, <a href='http://www.mitre.org/'>The MITRE Corporation</a>. CVE and the CVE logo are registered trademarks of The MITRE Corporation. CVE is sponsored by <a href='https://www.dhs.gov/' target='_blank'>U.S. Department of Homeland Security</a> (DHS) <a href='https://www.cisa.gov/about/divisions-offices/cybersecurity-division'>Cybersecurity and Infrastructure Security Agency</a> (CISA). CISA funds the <a href='https://www.dhs.gov/science-and-technology/hssedi'>Homeland Security Systems Engineering and Development Institute (HSSEDI)</a>, a DHS Federally Funded Research and Development Center (FFRDC) operated by The MITRE Corporation, to operate the CVE Program in cooperation with industry, government, and academic stakeholders under a public/private partnership."
+					"Copyright © 1999-2025, <a href='http://www.mitre.org/'>The MITRE Corporation</a>. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. CVE is sponsored by <a href='https://www.dhs.gov/' target='_blank'>U.S. Department of Homeland Security</a> (DHS) <a href='https://www.cisa.gov/about/divisions-offices/cybersecurity-division'>Cybersecurity and Infrastructure Security Agency</a> (CISA). CISA funds the <a href='https://www.dhs.gov/science-and-technology/hssedi'>Homeland Security Systems Engineering and Development Institute (HSSEDI)</a>, a DHS Federally Funded Research and Development Center (FFRDC) operated by The MITRE Corporation, to operate the CVE Program in cooperation with industry, government, and academic stakeholders under a public/private partnership."
 				]
 			},
 			{
 				"questionId": "MITRE_role_in_cve",
 				"questionText": "What is MITRE’s role",
 				"questionResponseParagraphs": [
-					"<a href='https://www.dhs.gov/science-and-technology/hssedi' target='_blank'>HSSEDI</a>, a DHS FFRDC operated by <a href='http://www.mitre.org/' target='_blank'>The MITRE Corporation</a>, executes the CVE Program <a href='/ResourcesSupport/Glossary?activeTerm=glossarySecretariat'>Secretariat</a>, MITRE <a href='/ResourcesSupport/Glossary?activeTerm=glossaryTLRoot'>Top-Level Root (TL-Root)</a>, and <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCNALR'>CNA of Last Resort (CNA-LR)</a> functions within the MITRE TL-Root. The MITRE Corporation owns the Copyright © 1999-2025 and the registered CVE trademark and the registered CVE logo trademark to ensure the program remains free for public use."
+					"<a href='https://www.dhs.gov/science-and-technology/hssedi' target='_blank'>HSSEDI</a>, a DHS FFRDC operated by <a href='http://www.mitre.org/' target='_blank'>The MITRE Corporation</a>, executes the CVE Program <a href='/ResourcesSupport/Glossary?activeTerm=glossarySecretariat'>Secretariat</a>, MITRE <a href='/ResourcesSupport/Glossary?activeTerm=glossaryTLRoot'>Top-Level Root (TL-Root)</a>, and <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCNALR'>CNA of Last Resort (CNA-LR)</a> functions within the MITRE TL-Root. The MITRE Corporation owns the Copyright © 1999-2025, the CVE trademark, and the registered CVE logo trademark to ensure the program remains free for public use."
 				]
 			},
 			{
@@ -478,4 +478,4 @@
 			}
 		]
 	}
-]
+]

src/assets/data/events.json

@@ -9,7 +9,7 @@
     "id": "glossaryCVE",
     "term": "CVE",
     "termLink": "/ResourcesSupport/Glossary?activeTerm=glossaryCVE",
-    "definition": "The CVE registered trademark and the name Common Vulnerabilities and Exposures."
+    "definition": "The CVE trademark and the name Common Vulnerabilities and Exposures."
   },
   {
     "id": "glossaryBoard",

src/assets/data/faqs.json

@@ -1149,7 +1149,7 @@
         },
         {
           "month": "June",
-          "value": "TBA"
+          "value": "1"
         },
         {
           "month": "July",