Vulnerability Discovery

Why do we need Vulnerability Discovery nodes?

Information about new vulnerabilities does not always find its official way to the public via the manufacturer. There can be various reasons for this. It is therefore important to monitor publications about new vulnerabilities in general.

What properties does a Vulnerability Discovery node have?

Property

Data type

Comment

summary

string

A short summary of the document.

product_vendor

string

The name of the product vendor whose products are concerned with the advisory.

references

List of URLs

The URLs which are mentioned in the original source.

publishing_company

string

The name of the organisation which has published this source document.

version_info

string

The information about the actual document version given in the source document.

classification

string

In this case it is always “Vulnerability Discovery”

title

string

The title of the source document.

url

URL

The URL of the source document.

cves

list of strings

All mentioned CVE IDs from the source document.

solution

text

The solution given in the source document to close the vulnerability.

scraped_date

datetime string (ISO 8601 standard)

The date when the source document was scraped.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

vulnerable_products

list of strings

The names of the products which were mentioned as vulnerable in the source document. E.g. ["xhibiter NFT marketplace 1.10.2"]

last_updated_date

datetime string (ISO 8601 standard)

The date when the source document was last updated.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

published_date

datetime string (ISO 8601 standard)

The date when the source document was published.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

severities

list of objects

The objects in the list are stringified json objects:
[‘{

“severity”: “critical”,

“origin_name”: “CVSS”

}’,

‘{

“severity”: “medium”,

“origin_name”: “vendor”

}’]

The severity is a string and the origin_name is a string.

Which nodes could a Vulnerability Discovery node be related to?

Security Advisory nodes can have relations to:

Published with Nuclino