The NVD hosts the Official CPE Dictionary and also analyzes CVE data from MITRE which produces a CPE or CPEs as added value. The hosting / maintenance of the CPE Dictionary and NVD analysis are distinct and separate workflows with different resources allocated. In late December 2009 NIST took on the responsibility of accepting name contributions and processing them to the CPE Dictionary. Please refer to the information located at both http://cpe.mitre.org/dictionary/index.html and http://nvd.nist.gov/cpe.cfm for a better understanding of the submission process. In the event you would like to designate a CPEs noted in a CVE as Official, please submit the proposed CPE Dictionary submissions to NIST at [hidden email] for consideration.
National Vulnerability Database