nvd

Documentation

Overview

Package nvd implements a vulnerability metadata appender using the NIST NVD database.

Index

• func SeverityFromCVSS(meta *NVDMetadata) database.Severity
• type NVDMetadata
• type NVDmetadataCVSSv2
• type NVDmetadataCVSSv3

Functions

func SeverityFromCVSS

func SeverityFromCVSS(meta *NVDMetadata) database.Severity

SeverityFromCVSS converts the CVSS Score (0.0 - 10.0) into a database.Severity following the qualitative rating scale available in the CVSS v3.0 specification (https://www.first.org/cvss/specification-document), Table 14.

The Negligible level is set for CVSS scores between [0, 1), replacing the specified None level, originally used for a score of 0.

Types

type NVDMetadata

type NVDMetadata struct {
	PublishedDateTime    string
	LastModifiedDateTime string
	CVSSv2               NVDmetadataCVSSv2
	CVSSv3               NVDmetadataCVSSv3
}

type NVDmetadataCVSSv2

type NVDmetadataCVSSv2 struct {
	Vectors             string
	Score               float64
	ExploitabilityScore float64
	ImpactScore         float64
}

type NVDmetadataCVSSv3

type NVDmetadataCVSSv3 struct {
	Vectors             string
	Score               float64
	ExploitabilityScore float64
	ImpactScore         float64
}