Hear me out, I wonder if the need for a decentralized database of data like this might be an actual good use for block chains?

Requires consensus

Immutable

Distributed

A user who needs the CVE database thus just needs to grab a copy of the ledger off of bit torrent or wherever and parse it for all data or updates, etc. It's not like CVEs get lots of updates, and you need to keep track of all of them forever anyways. Updates could be handled by just adding another entry to the chain, and bad actors couldn't really tamper with it.