Search by Specific CVE ID May Return Unrelated Results

[rlxdev]

There are some cases when the search involves only a given CVE ID where the results contain not only the target CVE record, but other CVE records that are not necessarily related.

One example is CVE-2020-1234. The search returns both CVE-2020-1234 and CVE-2019-1234, where the latter is not related to the former except for the fact that the IDs both end with 1234.

The other example is CVE-2020-2020 - along with the target CVE record, the search returns over 20k results most likely because the record contains the year 2020.

The search is apparently breaking out the components of the CVE ID and returning records that match at least the (last) identifier component of the CVE ID.