Class Vulnerability

A vulnerability.

Inheritance

object

Vulnerability

Implements

IMessage<Vulnerability>

IEquatable<Vulnerability>

IDeepCloneable<Vulnerability>

IBufferMessage

IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace: Google.Backstory

Assembly: Google.Backstory.dll

Syntax

public sealed class Vulnerability : IMessage<Vulnerability>, IEquatable<Vulnerability>, IDeepCloneable<Vulnerability>, IBufferMessage, IMessage

Constructors

Vulnerability()

Declaration

public Vulnerability()

Vulnerability(Vulnerability)

Declaration

public Vulnerability(Vulnerability other)

Parameters

Type	Name	Description
Vulnerability	other

Properties

About

If the vulnerability is about a specific noun (e.g. executable), then add it here.

Declaration

public Noun About { get; set; }

Property Value

Type	Description
Noun

CveDescription

Common Vulnerabilities and Exposures Description. https://cve.mitre.org/about/faqs.html#what_is_cve_record

Declaration

public string CveDescription { get; set; }

Property Value

Type	Description
string

CveId

Common Vulnerabilities and Exposures Id. https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures https://cve.mitre.org/about/faqs.html#what_is_cve_id

Declaration

public string CveId { get; set; }

Property Value

Type	Description
string

CvssBaseScore

CVSS Base Score in the range of 0.0 to 10.0. Useful for sorting.

Declaration

public float CvssBaseScore { get; set; }

Property Value

Type	Description
float

CvssVector

Vector of CVSS properties (e.g. "AV:L/AC:H/Au:N/C:N/I:P/A:C") Can be linked to via: https://nvd.nist.gov/vuln-metrics/cvss/v2-calculator

Declaration

public string CvssVector { get; set; }

Property Value

Type	Description
string

CvssVersion

Version of CVSS Vector/Score.

Declaration

public string CvssVersion { get; set; }

Property Value

Type	Description
string

Description

Description of the vulnerability.

Declaration

public string Description { get; set; }

Property Value

Type	Description
string

FirstFound

Products that maintain a history of vuln scans should populate first_found with the time that a scan first detected the vulnerability on this asset.

Declaration

public Timestamp FirstFound { get; set; }

Property Value

Type	Description
Timestamp

LastFound

Products that maintain a history of vuln scans should populate last_found with the time that a scan last detected the vulnerability on this asset.

Declaration

public Timestamp LastFound { get; set; }

Property Value

Type	Description
Timestamp

Name

Name of the vulnerability (e.g. "Unsupported OS Version detected").

Declaration

public string Name { get; set; }

Property Value

Type	Description
string

ScanEndTime

If the vulnerability was discovered during an asset scan, then this field should be populated with the time the scan ended. This field can be left unset if the end time is not available or not applicable.

Declaration

public Timestamp ScanEndTime { get; set; }

Property Value

Type	Description
Timestamp

ScanStartTime

If the vulnerability was discovered during an asset scan, then this field should be populated with the time the scan started. This field can be left unset if the start time is not available or not applicable.

Declaration

public Timestamp ScanStartTime { get; set; }

Property Value

Type	Description
Timestamp

Severity

The severity of the vulnerability.

Declaration

public Vulnerability.Types.Severity Severity { get; set; }

Property Value

Type	Description
Vulnerability.Types.Severity

SeverityDetails

Vendor-specific severity

Declaration

public string SeverityDetails { get; set; }

Property Value

Type	Description
string

Vendor

Vendor of scan that discovered vulnerability.

Declaration

public string Vendor { get; set; }

Property Value

Type	Description
string

VendorKnowledgeBaseArticleId

Vendor specific knowledge base article (e.g. "KBXXXXXX" from Microsoft). https://en.wikipedia.org/wiki/Microsoft_Knowledge_Base https://access.redhat.com/knowledgebase

Declaration

public string VendorKnowledgeBaseArticleId { get; set; }

Property Value

Type	Description
string

VendorVulnerabilityId

Vendor specific vulnerability id (e.g. Microsoft security bulletin id).

Declaration

public string VendorVulnerabilityId { get; set; }

Property Value

Type	Description
string