schema.external.nvd.cvss-v2.0.json Maven / Gradle / Ivy

{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "title": "JSON Schema for Common Vulnerability Scoring System version 2.0",
    "copyright": "Copyright (c) 2017, Forum of Incident Response and Security Teams, Inc. All rights reserved.",
    "id": "https://www.first.org/cvss/cvss-v2.0.json?20170531",
    "type": "object",
    "definitions": {
        "accessVectorType": {
            "type": "string",
            "enum": [ "NETWORK", "ADJACENT_NETWORK", "LOCAL" ]
        },
        "accessComplexityType": {
            "type": "string",
            "enum": [ "HIGH", "MEDIUM", "LOW" ]
        },
        "authenticationType": {
            "type": "string",
            "enum": [ "MULTIPLE", "SINGLE", "NONE" ]
        },
        "ciaType": {
            "type": "string",
            "enum": [ "NONE", "PARTIAL", "COMPLETE" ]
        },
        "exploitabilityType": {
            "type": "string",
            "enum": [ "UNPROVEN", "PROOF_OF_CONCEPT", "FUNCTIONAL", "HIGH", "NOT_DEFINED" ]
        },
        "remediationLevelType": {
            "type": "string",
            "enum": [ "OFFICIAL_FIX", "TEMPORARY_FIX", "WORKAROUND", "UNAVAILABLE", "NOT_DEFINED" ]
        },
        "reportConfidenceType": {
            "type": "string",
            "enum": [ "UNCONFIRMED", "UNCORROBORATED", "CONFIRMED", "NOT_DEFINED" ]
        },
        "collateralDamagePotentialType": {
            "type": "string",
            "enum": [ "NONE", "LOW", "LOW_MEDIUM", "MEDIUM_HIGH", "HIGH", "NOT_DEFINED" ]
        },
        "targetDistributionType": {
            "type": "string",
            "enum": [ "NONE", "LOW", "MEDIUM", "HIGH", "NOT_DEFINED" ]
        },
        "ciaRequirementType": {
            "type": "string",
            "enum": [ "LOW", "MEDIUM", "HIGH", "NOT_DEFINED" ]
        },
        "scoreType": {
            "type": "number",
            "minimum": 0,
            "maximum": 10
        }
    },
    "properties": {
        "accessVector":                   { "$ref": "#/definitions/accessVectorType" },
        "accessComplexity":               { "$ref": "#/definitions/accessComplexityType" },
        "authentication":                 { "$ref": "#/definitions/authenticationType" },
        "confidentialityImpact":          { "$ref": "#/definitions/ciaType" },
        "integrityImpact":                { "$ref": "#/definitions/ciaType" },
        "availabilityImpact":             { "$ref": "#/definitions/ciaType" },
        "baseScore":                      { "$ref": "#/definitions/scoreType" }
    },
    "required": [ "version", "vectorString", "baseScore" ]
}