Disclosing vulnerabilities 

When reported vulnerabilities have been investigated and validated to be a legitimate vulnerability that warrants public disclosure, Milestone assigns a CVE ID to the vulnerability and initiates the responsible disclosure process, which consists of submitting the CVE ID to MITRE, publishing information about the vulnerability on our cybersecurity web site, and, when applicable, publish a press release.