{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:55:00Z","timestamp":1767095700691,"version":"3.48.0"},"publisher-location":"New York, NY, USA","reference-count":29,"publisher":"ACM","funder":[{"name":"SERICS","award":["Spoke 6, Task 1.2, Project SCAI - Supply Chain Attack Avoidance"],"award-info":[{"award-number":["Spoke 6, Task 1.2, Project SCAI - Supply Chain Attack Avoidance"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733799.3762969","type":"proceedings-article","created":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:38:49Z","timestamp":1767094729000},"page":"89-99","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["AI-related Vulnerabilities within CVEs: Are We Ready Yet? A Study of Vulnerability Disclosure in AI Products"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6585-5494","authenticated-orcid":false,"given":"Marcello","family":"Maugeri","sequence":"first","affiliation":[{"name":"University of Catania, Catania, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2215-0416","authenticated-orcid":false,"given":"Gianpietro","family":"Castiglione","sequence":"additional","affiliation":[{"name":"University of Catania, Catania, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7045-0213","authenticated-orcid":false,"given":"Mario","family":"Raciti","sequence":"additional","affiliation":[{"name":"IMT School for Advanced Studies Lucca, Lucca, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7615-8643","authenticated-orcid":false,"given":"Giampaolo","family":"Bella","sequence":"additional","affiliation":[{"name":"University of Catania, Catania, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,12,30]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"publisher","unstructured":"Manjunatha A Kethan Kota Anoop\u00a0S. Babu and Sree\u00a0Vivek S. 2024. CVE Severity Prediction From Vulnerability Description - A Deep Learning Approach. Procedia Computer Science 235 (2024) 3105\u20133117. 10.1016\/j.procs.2024.04.294International Conference on Machine Learning and Data Engineering (ICMLDE 2023).","DOI":"10.1016\/j.procs.2024.04.294"},{"key":"e_1_3_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/CSITSS64042.2024.10816942"},{"key":"e_1_3_3_2_4_2","unstructured":"Black Duck Cybersecurity Research Center. 2024. CyRC Vulnerability Advisory: CVE-2024-5185 Data Poisoning Vulnerability in EmbedAI Application. https:\/\/www.blackduck.com\/blog\/cyrc-advisory-data-poisoning-embedai.html Accessed: 28 August 2025."},{"key":"e_1_3_3_2_5_2","series-title":"(NIPS \u201920)","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Brown Tom\u00a0B.","year":"2020","unstructured":"Tom\u00a0B. Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, Sandhini Agarwal, Ariel Herbert-Voss, Gretchen Krueger, Tom Henighan, Rewon Child, Aditya Ramesh, Daniel\u00a0M. Ziegler, Jeffrey Wu, Clemens Winter, Christopher Hesse, Mark Chen, Eric Sigler, Mateusz Litwin, Scott Gray, Benjamin Chess, Jack Clark, Christopher Berner, Sam McCandlish, Alec Radford, Ilya Sutskever, and Dario Amodei. 2020. Language models are few-shot learners. In Proceedings of the 34th International Conference on Neural Information Processing Systems (Vancouver, BC, Canada) (NIPS \u201920). Curran Associates Inc., Red Hook, NY, USA, Article 159, 25\u00a0pages."},{"key":"e_1_3_3_2_6_2","volume-title":"Sampling Techniques (3rd ed.)","author":"Cochran W.G.","year":"1977","unstructured":"W.G. Cochran. 1977. Sampling Techniques (3rd ed.). Wiley."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","unstructured":"Yukun Dong Yeer Tang Xiaotong Cheng and Yufei Yang. 2023. DeKeDVer: A deep learning-based multi-type software vulnerability classification framework using vulnerability description and source code. Information and Software Technology 163 (2023) 107290. 10.1016\/j.infsof.2023.107290","DOI":"10.1016\/j.infsof.2023.107290"},{"key":"e_1_3_3_2_8_2","doi-asserted-by":"publisher","unstructured":"Rikhiya Ghosh Hans-Martin von Stockhausen Martin Schmitt George\u00a0Marica Vasile Sanjeev\u00a0Kumar Karn and Oladimeji Farri. 2025. CVE-LLM: Ontology-Assisted Automatic Vulnerability Evaluation Using Large Language Models. Proceedings of the AAAI Conference on Artificial Intelligence 39 28 (Apr. 2025) 28757\u201328765. 10.1609\/aaai.v39i28.35139","DOI":"10.1609\/aaai.v39i28.35139"},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54204-6_6"},{"key":"e_1_3_3_2_10_2","volume-title":"Securing the AI Software Supply Chain","author":"Hepworth Isaac","year":"2024","unstructured":"Isaac Hepworth, Kara Olive, Kingshuk Dasgupta, Michael Le, Mark Lodato, Mihai Maruseac, Sarah Meiklejohn, Shamik Chaudhuri, and Tehila Minkus. 2024. Securing the AI Software Supply Chain. Technical Report. Google."},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.5555\/3692070.3693020"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"publisher","unstructured":"Robert\u00a0V. Krejcie and Daryle\u00a0W. Morgan. 1970. Determining Sample Size for Research Activities. Educational and Psychological Measurement 30 3 (1970) 607\u2013610. 10.1177\/001316447003000308","DOI":"10.1177\/001316447003000308"},{"key":"e_1_3_3_2_13_2","unstructured":"Zhongzheng Lai Huaming Chen Ruoxi Sun Yu Zhang Minhui Xue and Dong Yuan. 2024. On Security Weaknesses and Vulnerabilities in Deep Learning Systems. https:\/\/arxiv.org\/abs\/2406.08688"},{"key":"e_1_3_3_2_14_2","doi-asserted-by":"publisher","unstructured":"Zhongzheng Lai Huaming Chen Ruoxi Sun Yu Zhang Minhui Xue and Dong Yuan. 2025. On Security Weaknesses and Vulnerabilities in Deep Learning Systems. IEEE Transactions on Dependable and Secure Computing 22 3 (2025) 2243\u20132257. 10.1109\/TDSC.2024.3482707","DOI":"10.1109\/TDSC.2024.3482707"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1201\/9780429296284"},{"key":"e_1_3_3_2_16_2","unstructured":"Francesco Marchiori Denis Donadel and Mauro Conti. 2025. Can LLMs Classify CVEs? Investigating LLMs Capabilities in Computing CVSS Vectors. https:\/\/arxiv.org\/abs\/2504.10713"},{"key":"e_1_3_3_2_17_2","volume-title":"AI-CVE-Analyser","author":"Maugeri Marcello","year":"2025","unstructured":"Marcello Maugeri, Gianpietro Castiglione, Mario Raciti, and Giampaolo Bella. 2025. AI-CVE-Analyser. https:\/\/github.com\/marcellomaugeri\/AI-CVE-Classifier"},{"key":"e_1_3_3_2_18_2","unstructured":"MITRE. 1999. Common Vulnerabilities and Exposures. https:\/\/www.cve.org\/ Accessed: 28 August 2025."},{"key":"e_1_3_3_2_19_2","unstructured":"The\u00a0Hacker News. 2025. Critical Vulnerability in Anthropic. https:\/\/thehackernews.com\/2025\/07\/critical-vulnerability-in-anthropics.html Accessed: 28 August 2025."},{"key":"e_1_3_3_2_20_2","unstructured":"NIST. 2025. NIST Trustworthy and Responsible AI NIST AI 100-2e2025. https:\/\/nvlpubs.nist.gov\/nistpubs\/ai\/NIST.AI.100-2e2025.pdf Accessed: 28 August 2025."},{"key":"e_1_3_3_2_21_2","unstructured":"Oligo Security. 2025. Shadow Vulnerabilities in AI: The Hidden Perils Beyond CVEs. https:\/\/www.oligo.security\/blog\/shadow-vulnerabilities-in-ai-the-hidden-perils-beyond-cves Accessed: 28 August 2025."},{"key":"e_1_3_3_2_22_2","series-title":"(NIPS \u201923)","volume-title":"Proceedings of the 37th International Conference on Neural Information Processing Systems","author":"Shinn Noah","year":"2023","unstructured":"Noah Shinn, Federico Cassano, Ashwin Gopinath, Karthik Narasimhan, and Shunyu Yao. 2023. Reflexion: language agents with verbal reinforcement learning. In Proceedings of the 37th International Conference on Neural Information Processing Systems (New Orleans, LA, USA) (NIPS \u201923). Curran Associates Inc., Red Hook, NY, USA."},{"key":"e_1_3_3_2_23_2","volume-title":"The 4th Workshop on Artificial Intelligence-Enabled Cybersecurity Analytics","author":"Simonetto Stefano","year":"2024","unstructured":"Stefano Simonetto, Thijs Sebastiaan van Ede, Peter Bosch, Willem Jonker, and Ronan Oostveen. 2024. Text2Weak: mapping CVEs to CWEs using description embeddings analysis. In The 4th Workshop on Artificial Intelligence-Enabled Cybersecurity Analytics. 4th Workshop on Artificial Intelligence-Enabled Cybersecurity Analytics."},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/3442167.3442177"},{"key":"e_1_3_3_2_25_2","unstructured":"Veronika Telychko. 2025. CVE-2025-32711 Vulnerability: \u201cEchoLeak\u201d\u2019 Flaw in Microsoft 365 Copilot Could Enable a Zero-Click Attack on an AI Agent. https:\/\/socprime.com\/blog\/cve-2025-32711-zero-click-ai-vulnerability\/ Accessed: 28 August 2025."},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"publisher","unstructured":"Suqing Wu Yukun Liu Mengqi Ruan Siyu Chen and Xiao-Yun Xie. 2025. Human-generative AI collaboration enhances task performance but undermines human\u2019s intrinsic motivation. Scientific Reports 15 1 (29 Apr 2025) 15105. 10.1038\/s41598-025-98385-2","DOI":"10.1038\/s41598-025-98385-2"},{"key":"e_1_3_3_2_27_2","volume-title":"ICLR 2024 Workshop on Large Language Model (LLM) Agents","author":"Zhang Bin","year":"2024","unstructured":"Bin Zhang, Hangyu Mao, Jingqing Ruan, Ying Wen, Yang Li, Shao Zhang, Zhiwei Xu, Dapeng Li, Ziyue Li, Rui Zhao, Lijuan Li, and Guoliang Fan. 2024. Controlling Large Language Model-based Agents for Large-Scale Decision-Making: An Actor-Critic Approach. In ICLR 2024 Workshop on Large Language Model (LLM) Agents. https:\/\/openreview.net\/forum?id=QC7tHi7m1H"},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","unstructured":"Jiliang Zhang and Chen Li. 2020. Adversarial Examples: Opportunities and Challenges. IEEE Transactions on Neural Networks and Learning Systems 31 7 (2020) 2578\u20132593. 10.1109\/TNNLS.2019.2933524","DOI":"10.1109\/TNNLS.2019.2933524"},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"publisher","unstructured":"Zijing Zhang Vimal Kumar Bernhard Pfahringer and Albert Bifet. 2024. Ai-enabled automated common vulnerability scoring from common vulnerabilities and exposures descriptions: AI-enabled automated common vulnerability scoring... Int. J. Inf. Secur. 24 1 (Nov. 2024) 20\u00a0pages. 10.1007\/s10207-024-00922-z","DOI":"10.1007\/s10207-024-00922-z"},{"key":"e_1_3_3_2_30_2","series-title":"(NIPS \u201923)","volume-title":"Proceedings of the 37th International Conference on Neural Information Processing Systems","author":"Zheng Lianmin","year":"2023","unstructured":"Lianmin Zheng, Wei-Lin Chiang, Ying Sheng, Siyuan Zhuang, Zhanghao Wu, Yonghao Zhuang, Zi Lin, Zhuohan Li, Dacheng Li, Eric\u00a0P. Xing, Hao Zhang, Joseph\u00a0E. Gonzalez, and Ion Stoica. 2023. Judging LLM-as-a-judge with MT-bench and Chatbot Arena. In Proceedings of the 37th International Conference on Neural Information Processing Systems (New Orleans, LA, USA) (NIPS \u201923). Curran Associates Inc., Red Hook, NY, USA, Article 2020, 29\u00a0pages."}],"event":{"name":"AISec '25: Proceedings of the 2025 Workshop on Artificial Intelligence and Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Taipei , Taiwan","acronym":"AISec '25"},"container-title":["Proceedings of the 18th ACM Workshop on Artificial Intelligence and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733799.3762969","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:51:38Z","timestamp":1767095498000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733799.3762969"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":29,"alternative-id":["10.1145\/3733799.3762969","10.1145\/3733799"],"URL":"https:\/\/doi.org\/10.1145\/3733799.3762969","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-12-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}