Press Release
May 21, 2008
Information-technology Promotion Agency, Japan
Japan Computer Emergency Response Team Coordination Center

English Versions of JVN and JVN iPedia Released- Aiming to Enhance Vulnerability Information Distribution Inside and Outside
Japan and Strengthen International Cooperation Information-technology Promotion Agency, Japan (IPA), headed by chairman Koji Nishigaki, andJapan Computer Emergency Response Team Coordination Center (JPCERT/CC), headed by board
chairman Kazumasa Utashiro, have offered products vulnerability information collected within theframework of Japan through JVN (Japan Vulnerability Notes) and JVN iPedia. The information had been
provided entirely in Japanese, but as of May 21, 2008, English versions are made available.
(JVN: http://jvn.jp/en/, JVN iPedia: http://jvndb.jvn.jp/en/)"Standards for Handling Software Vulnerability Information", which was officially announced by theMinistry of Economy, Trade and Industry in July 2004, specifies IPA as the information receiving bodyand JPCERT/CC as the coordination body for vulnerability information distribution in Japan. Based onthese standards, the "Information Security Early Warning Partnership Guideline" was established, andIPA and JPCERT/CC have provided vulnerability-related information in Japanese through JVN and JVN
iPedia.
In recent years, due to the globalization of products, vulnerability information concerning Japanese
products is becoming increasingly important not only in Japan, but also overseas. At the same time,
demands from overseas development vendors for information sharing in English are also increasing.
In response to such situation, IPA and JPCERT/CC have released the English versions of JVN andJVN iPedia on May 21, 2008, as part of efforts to share vulnerability information of products handled inJapan with overseas coordination institutions, developers and users.
Offering information directly in English makes it possible to promptly provide English-speaking users
with accurate information. It is also expected to promote understanding of Japan's efforts towardvulnerability information handling and encourage overseas products developers to report vulnerability
information to JVN and JVN iPedia.
For more information about JVN: http://www.jpcert.or.jp/english/vh/project.html■ Vulnerability Information Available on the English Version of JVN
On the English version of JVN, all 265 vulnerability notes for software and other products publishedunder the Information Security Early Warning Partnership since its establishment in 2004 have been
made available in English as of May 21. The English version of JVN will be updated with newvulnerability information.
1

■ Vulnerability Information Available on the English Version of JVN iPedia
On the English version of JVN iPedia, 60 vulnerability notes for products developed in Japan havebeen made available in English as of May 21 in addition to the above 265 vulnerability notes on JVN. The
English version of JVN iPedia is equipped with search functions equivalent to that of the Japaneseversion so that users can easily find desired vulnerability information. The scope of vulnerability
information collection will be expanded to further improve the database, mainly focusing on products
developed in Japan.
References:• Vulnerability information portal site (JVN: Japan Vulnerability Notes)
Provides vulnerability information found inside and outside Japan and reported to "Information
Security Early Warning Partnership"
English Version: http://jvn.jp/en/
Japanese Version: http://jvn.jp/• Vulnerability countermeasure information database (JVN iPedia)
A database that stores vulnerability information posted on JVN and vulnerability information ofsoftware and other products used in Japan
English Version: http://jvndb.jvn.jp/en/
Japanese Version: http://jvndb.jvn.jp/• Explanation of JVN: What is "Vulnerability Countermeasure Information Portal Site, JVN?"
English: http://www.jpcert.or.jp/english/vh/project.html
English: http://www.ipa.go.jp/security/english/jvn_e.html"Information Security Early Warning Partnership"(Framework for Vulnerability Information Handling)
Vulnerability Information Distribution Framework

Websitevulnerabilities

Receive Vulnerabilityand Analyze

Vulnerability
reports

受付機関
VerifyDiscoverer

Software andother productvulnerabilities

Pass onvulnerability
reports

vulnerability
reports

Coordinate
Determineannouncement date,coordinate with developersand overseas agencies

Company
SoftwareDevelopers

分析機関
Advanced Industrial
Science and Technology
報告された脆弱性
Notification of vulnerability information
関連情報の検証

Expected Effects

SystemIntegrators

Individual

Security Promotion Realizing Security
Measures Distribution and others

Supporting Analysis

Vulnerability
reports

Aggregatevulnerability
handling situation,
AnnounceUsers
Users
arrangement of
対策情報ポータル
Information Portal Site対策方法等
対応状況
announcement Vulnerability
counterdates
measures Government

Website operators
W eサイト運営者bverify and検証、対策実施
implement
countermeasures

Announce incidents involving
personal information disclosure

1. Promotion of vulnerability countermeasures taken by product developers and website operators
2. Prevention of inadvertent disclosure of vulnerability information and vulnerabilities being neglected
3. Prevention of critical system outage and critical information leaks including personal information* IPA: Information-technology Promotion Agency, Japan, JPCERT/CC: Japan Computer Emergency Response Team Coordination Center, AIST: National
Institute of Advanced Industrial Science and Technology

2■ Contact
Soma and Nagayasu, IT Security Center, Information-technology Promotion Agency,Japan (IPA)E-mail: vuln-inq@ipa.go.jp
Furuta, Information Coordination Group, Japan Computer Emergency Response
Team Coordination Center (JPCERT/CC)
E-mail: office@jpcert.or.jp■ Contact from the Press
Yokoyama, Public Relations Group, Strategic Planning Department,
Information-technology Promotion Agency, Japan (IPA)E-mail: pr-inq@ipa.go.jp
Kohda, Office of Business Planning Public Relations, Japan Computer Emergency
Response Team Coordination Center (JPCERT/CC)
E-mail: pr@jpcert.or.jp■ Requests or Comments for JVN
E-mail: jvn@jvn.jp■ Requests or Comments for JVN iPedia Functions
IT Security Center, Information-technology Promotion Agency, Japan (IPA)E-mail: vuln-inq@ipa.go.jp

3