To determine whether an observed vulnerability is new, which database or organization should you submit the information to?

• A. IANA
• B. RIPE
• C. CVE
• D. APIPA

Answer: (C)

When you’re trying to determine if a vulnerability is new, you need a centralized, standardized reference for known issues. The CVE system does exactly that by providing a unique identifier to each publicly disclosed vulnerability. By submitting details to a CVE Numbering Authority (CNA) and obtaining or confirming a CVE ID, you can check whether the vulnerability has already been cataloged and ensure consistent tracking across advisories, tools, and mitigations. This helps prevent duplicate reports and makes it easier to share information with researchers, vendors, and security products.

IANA handles global IP address space and protocol parameter registries, not vulnerability reporting. RIPE is a regional internet registry focused on IP address allocation and related data, not vulnerability databases. APIPA refers to Automatic Private IP Addressing, a local addressing feature, not a vulnerability database.