schema.external.nvd.cvss-v3.x.json Maven / Gradle / Ivy

{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "title": "JSON Schema for Common Vulnerability Scoring System version 3.x",
    "id": "https://scap.nist.gov/schema/nvd/feed/1.1/cvss-v3.x.json",
    "type": "object",
    "definitions": {
        "attackVectorType": {
            "type": "string",
            "enum": [ "NETWORK", "ADJACENT_NETWORK", "LOCAL", "PHYSICAL" ]
        },
        "modifiedAttackVectorType": {
            "type": "string",
            "enum": [ "NETWORK", "ADJACENT_NETWORK", "LOCAL", "PHYSICAL", "NOT_DEFINED" ]
        },
        "attackComplexityType": {
            "type": "string",
            "enum": [ "HIGH", "LOW" ]
        },
        "modifiedAttackComplexityType": {
            "type": "string",
            "enum": [ "HIGH", "LOW", "NOT_DEFINED" ]
        },
        "privilegesRequiredType": {
            "type": "string",
            "enum": [ "HIGH", "LOW", "NONE" ]
        },
        "modifiedPrivilegesRequiredType": {
            "type": "string",
            "enum": [ "HIGH", "LOW", "NONE", "NOT_DEFINED" ]
        },
        "userInteractionType": {
            "type": "string",
            "enum": [ "NONE", "REQUIRED" ]
        },
        "modifiedUserInteractionType": {
            "type": "string",
            "enum": [ "NONE", "REQUIRED", "NOT_DEFINED" ]
        },
        "scopeType": {
            "type": "string",
            "enum": [ "UNCHANGED", "CHANGED" ]
        },
        "modifiedScopeType": {
            "type": "string",
            "enum": [ "UNCHANGED", "CHANGED", "NOT_DEFINED" ]
        },
        "ciaType": {
            "type": "string",
            "enum": [ "NONE", "LOW", "HIGH" ]
        },
        "modifiedCiaType": {
            "type": "string",
            "enum": [ "NONE", "LOW", "HIGH", "NOT_DEFINED" ]
        },
        "exploitCodeMaturityType": {
            "type": "string",
            "enum": [ "UNPROVEN", "PROOF_OF_CONCEPT", "FUNCTIONAL", "HIGH", "NOT_DEFINED" ]
        },
        "remediationLevelType": {
            "type": "string",
            "enum": [ "OFFICIAL_FIX", "TEMPORARY_FIX", "WORKAROUND", "UNAVAILABLE", "NOT_DEFINED" ]
        },
        "confidenceType": {
            "type": "string",
            "enum": [ "UNKNOWN", "REASONABLE", "CONFIRMED", "NOT_DEFINED" ]
        },
        "ciaRequirementType": {
            "type": "string",
            "enum": [ "LOW", "MEDIUM", "HIGH", "NOT_DEFINED" ]
        },
        "scoreType": {
            "type": "number",
            "minimum": 0,
            "maximum": 10
        },
        "severityType": {
            "type": "string",
            "enum": [ "NONE", "LOW", "MEDIUM", "HIGH", "CRITICAL" ]
        }
    },
    "properties": {
        "attackVector":                   { "$ref": "#/definitions/attackVectorType" },
        "attackComplexity":               { "$ref": "#/definitions/attackComplexityType" },
        "privilegesRequired":             { "$ref": "#/definitions/privilegesRequiredType" },
        "userInteraction":                { "$ref": "#/definitions/userInteractionType" },
        "scope":                          { "$ref": "#/definitions/scopeType" },
        "confidentialityImpact":          { "$ref": "#/definitions/ciaType" },
        "integrityImpact":                { "$ref": "#/definitions/ciaType" },
        "availabilityImpact":             { "$ref": "#/definitions/ciaType" },
        "baseScore":                      { "$ref": "#/definitions/scoreType" },
        "baseSeverity":                   { "$ref": "#/definitions/severityType" }
    },
    "required": [ "version", "vectorString", "baseScore", "baseSeverity" ]
}