19Mar
Can a single CVE have multiple CWEs?
In my work, we use a database to collect information about vulnerabilities which have CVE-ids assigned to them. One of these data is the CWE, which we store in a single column directly in the table containing the CVEs. The question is whether this is a good design, since from the NVD API it seems that a single CVE could have multiple CWEs, but I never found any example of a CVE with multiple CWEs.