CVE to CWE and ATT&CK Vulnerability Mapping Dataset

xamxte's dataset maps Common Vulnerabilities and Exposures (CVE) descriptions to Common Weakness Enumeration (CWE) categories and MITRE ATT&CK techniques. It is built from the National Vulnerability Database (NVD) and uses AI-assisted label refinement. The dataset was last updated in March 2026.

Use Cases

• Classify CVE descriptions into one of 205 CWE categories for weakness type identification.
• Perform multi-label classification to map CVE descriptions to 361 MITRE ATT&CK techniques.
• Train NLP models to predict CWE labels from vulnerability text descriptions.
• Analyze the relationship between software weaknesses and adversary tactics via the CVE-to-ATT&CK mapping.

Strengths

• Contains mappings for 205 distinct CWE classes.
• Provides multi-label mappings to 361 MITRE ATT&CK techniques.
• Sourced from the authoritative National Vulnerability Database (NVD).

Limitations

• The exact number of CVE records and data size are unknown.
• Class distribution and potential label imbalance across 205 CWE categories are unspecified.
• AI-assisted label refinement may introduce classification noise.

Provenance

Source

National Vulnerability Database (NVD).

Collection Method

Built from NVD with AI-assisted label refinement.

Freshness

Last updated on 2026-03-17.