Why cloud bugs don't get CVEs, and why it's an issue

Intended to provide admins with the necessary information for prioritizing and deploying patches, the CVE system was devised at a time when nearly all enterprise software was running on-premises.