Why is MITRE not changing some CVE entries that are clearly wrong? I have deeply analysed and highly tested some specific vulnerabilities. The CVE reports of them are in some cases inconsistent, incorrect or even registered to one CPE while I created reproducible proof that that specific CVE applies to multiple versions (CPE's) of the same product, and so it should be correctly listed.
I think the quality of the database is quite worthless if they don't correct it. I tried to contact them several times, but they don't seem to fix it. What's best to do now?