The Common Vulnerability and Exposures standard system is broken and I was part of the problem. I'll go through where we started documenting and correlating vulnerabilities across the industry, and where we went wrong. Oh, and why the US Government is only part of the problem.