Security Advisory

Why do we need Security Advisory nodes?

Product manufacturers are usually the first to officially report on their own vulnerabilities. Security advisories are an excellent source for finding out about vulnerabilities that affect you as quickly as possible.

What properties does a Security Advisory node have?

Property

Data type

Comment

summary

string

A short summary of the document.

product_vendor

string

The name of the product vendor whose products are concerned with the advisory.

references

List of URLs

The URLs which are mentioned in the original source.

publishing_company

string

The name of the organisation which has published this advisory. In this case it is always the vendor itself.

version_info

string

The information about the actual document version given in the source document.

classification

string

In this case it is always “Security Advisory”

title

string

The title of the source document.

url

URL

The URL of the source document.

cves

list of strings

All mentioned CVE IDs from the source document.

solution

text

The solution given in the source document to close the vulnerability.

scraped_date

datetime string (ISO 8601 standard)

The date when the source document was scraped.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

vulnerable_products

list of strings

The names of the products which were mentioned as vulnerable in the source document. E.g. ["xhibiter NFT marketplace 1.10.2"]

last_updated_date

datetime string (ISO 8601 standard)

The date when the source document was last updated.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

published_date

datetime string (ISO 8601 standard)

The date when the source document was published.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

severities

list of objects

The objects in the list are stringified json objects:
[‘{

“severity”: “critical”,

“origin_name”: “CVSS”

}’,

‘{

“severity”: “medium”,

“origin_name”: “vendor”

}’]

The severity is a string and the origin_name is a string.

Which nodes could a Security Advisory node be related to?

Security Advisory nodes can have relations to:

Published with Nuclino