Complete Vulnerability Notification Form

Detailed coordinated vulnerability disclosure submission aligned to legal, technical, and operational reporting requirements.

Back to CVD guidance

[A] Reporter information

Reporter type

Full name

Role

Organization

Email

Phone

[B] Vulnerability identification

Vulnerability title

Affected entity/owner

Affected asset/system (URL, app, host, service)

Affected versions/environment

Discovery date

First contact date

Severity

Exploitation status

[C] Technical and impact details

Impact summary *

Formatting help: start with affected users/services, expected business impact, and severity rationale.

Steps to reproduce *

Formatting help: use numbered steps, include prerequisites, then expected vs actual result.

Proof of concept / indicators

Formatting help: include harmless PoC snippets, logs, hashes, and indicators of compromise.

Suggested remediation

Formatting help: prioritize immediate containment, medium-term fixes, and verification checks.

Attach evidence files

Accepted: images, PDF, Office documents, logs, JSON, ZIP archives.

[D] Disclosure and legal declarations

Disclosure preference

Personal/sensitive data exposure observed?

I confirm this report is submitted in good faith for coordinated remediation.I confirm absence of fraudulent intent or malice.I confirm actions taken were necessary and proportionate.