|
3973 | 3973 | "items": {
|
3974 | 3974 | "type": "object",
|
3975 | 3975 | "anyOf": [
|
| 3976 | + { |
| 3977 | + "required": [ |
| 3978 | + "cvssV4_0" |
| 3979 | + ] |
| 3980 | + }, |
3976 | 3981 | {
|
3977 | 3982 | "required": [
|
3978 | 3983 | "cvssV3_1"
|
|
4018 | 4023 | ]
|
4019 | 4024 | }
|
4020 | 4025 | },
|
| 4026 | + "cvssV4_0": { |
| 4027 | + "$schema": "http://json-schema.org/draft-07/schema#", |
| 4028 | + "additionalProperties": false, |
| 4029 | + "allOf": [ |
| 4030 | + { |
| 4031 | + "properties": { |
| 4032 | + "baseScore": { |
| 4033 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType" |
| 4034 | + }, |
| 4035 | + "baseSeverity": { |
| 4036 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType" |
| 4037 | + } |
| 4038 | + } |
| 4039 | + }, |
| 4040 | + { |
| 4041 | + "properties": { |
| 4042 | + "threatScore": { |
| 4043 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType" |
| 4044 | + }, |
| 4045 | + "threatSeverity": { |
| 4046 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType" |
| 4047 | + } |
| 4048 | + } |
| 4049 | + }, |
| 4050 | + { |
| 4051 | + "properties": { |
| 4052 | + "environmentalScore": { |
| 4053 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneScoreType" |
| 4054 | + }, |
| 4055 | + "environmentalSeverity": { |
| 4056 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/noneSeverityType" |
| 4057 | + } |
| 4058 | + } |
| 4059 | + } |
| 4060 | + ], |
| 4061 | + "definitions": { |
| 4062 | + "attackComplexityType": { |
| 4063 | + "type": "string" |
| 4064 | + }, |
| 4065 | + "attackRequirementsType": { |
| 4066 | + "type": "string" |
| 4067 | + }, |
| 4068 | + "attackVectorType": { |
| 4069 | + "type": "string" |
| 4070 | + }, |
| 4071 | + "automatableType": { |
| 4072 | + "type": "string" |
| 4073 | + }, |
| 4074 | + "ciaRequirementType": { |
| 4075 | + "type": "string" |
| 4076 | + }, |
| 4077 | + "criticalScoreType": { |
| 4078 | + "type": "number" |
| 4079 | + }, |
| 4080 | + "criticalSeverityType": { |
| 4081 | + "const": "string" |
| 4082 | + }, |
| 4083 | + "exploitMaturityType": { |
| 4084 | + "type": "string" |
| 4085 | + }, |
| 4086 | + "highScoreType": { |
| 4087 | + "type": "number" |
| 4088 | + }, |
| 4089 | + "highSeverityType": { |
| 4090 | + "type": "string" |
| 4091 | + }, |
| 4092 | + "lowScoreType": { |
| 4093 | + "type": "number" |
| 4094 | + }, |
| 4095 | + "lowSeverityType": { |
| 4096 | + "type": "string" |
| 4097 | + }, |
| 4098 | + "mediumScoreType": { |
| 4099 | + "type": "number" |
| 4100 | + }, |
| 4101 | + "mediumSeverityType": { |
| 4102 | + "const": "string" |
| 4103 | + }, |
| 4104 | + "modifiedAttackComplexityType": { |
| 4105 | + "type": "string" |
| 4106 | + }, |
| 4107 | + "modifiedAttackRequirementsType": { |
| 4108 | + "type": "string" |
| 4109 | + }, |
| 4110 | + "modifiedAttackVectorType": { |
| 4111 | + "type": "string" |
| 4112 | + }, |
| 4113 | + "modifiedPrivilegesRequiredType": { |
| 4114 | + "type": "string" |
| 4115 | + }, |
| 4116 | + "modifiedSubCType": { |
| 4117 | + "type": "string" |
| 4118 | + }, |
| 4119 | + "modifiedSubIaType": { |
| 4120 | + "type": "string" |
| 4121 | + }, |
| 4122 | + "modifiedUserInteractionType": { |
| 4123 | + "type": "string" |
| 4124 | + }, |
| 4125 | + "modifiedVulnCiaType": { |
| 4126 | + "type": "string" |
| 4127 | + }, |
| 4128 | + "noneScoreType": { |
| 4129 | + "type": "number" |
| 4130 | + }, |
| 4131 | + "noneSeverityType": { |
| 4132 | + "const": "string" |
| 4133 | + }, |
| 4134 | + "privilegesRequiredType": { |
| 4135 | + "type": "string" |
| 4136 | + }, |
| 4137 | + "providerUrgencyType": { |
| 4138 | + "type": "string" |
| 4139 | + }, |
| 4140 | + "recoveryType": { |
| 4141 | + "type": "string" |
| 4142 | + }, |
| 4143 | + "safetyType": { |
| 4144 | + "type": "string" |
| 4145 | + }, |
| 4146 | + "scoreType": { |
| 4147 | + "type": "number" |
| 4148 | + }, |
| 4149 | + "severityType": { |
| 4150 | + "type": "string" |
| 4151 | + }, |
| 4152 | + "subCiaType": { |
| 4153 | + "type": "string" |
| 4154 | + }, |
| 4155 | + "userInteractionType": { |
| 4156 | + "type": "string" |
| 4157 | + }, |
| 4158 | + "valueDensityType": { |
| 4159 | + "type": "string" |
| 4160 | + }, |
| 4161 | + "vulnCiaType": { |
| 4162 | + "type": "string" |
| 4163 | + }, |
| 4164 | + "vulnerabilityResponseEffortType": { |
| 4165 | + "type": "string" |
| 4166 | + } |
| 4167 | + }, |
| 4168 | + "properties": { |
| 4169 | + "Automatable": { |
| 4170 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/automatableType" |
| 4171 | + }, |
| 4172 | + "Recovery": { |
| 4173 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/recoveryType" |
| 4174 | + }, |
| 4175 | + "Safety": { |
| 4176 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/safetyType" |
| 4177 | + }, |
| 4178 | + "attackComplexity": { |
| 4179 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackComplexityType" |
| 4180 | + }, |
| 4181 | + "attackRequirements": { |
| 4182 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackRequirementsType" |
| 4183 | + }, |
| 4184 | + "attackVector": { |
| 4185 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/attackVectorType" |
| 4186 | + }, |
| 4187 | + "availabilityRequirement": { |
| 4188 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType" |
| 4189 | + }, |
| 4190 | + "baseScore": { |
| 4191 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/scoreType" |
| 4192 | + }, |
| 4193 | + "baseSeverity": { |
| 4194 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/severityType" |
| 4195 | + }, |
| 4196 | + "confidentialityRequirement": { |
| 4197 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType" |
| 4198 | + }, |
| 4199 | + "exploitMaturity": { |
| 4200 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/exploitMaturityType" |
| 4201 | + }, |
| 4202 | + "integrityRequirement": { |
| 4203 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/ciaRequirementType" |
| 4204 | + }, |
| 4205 | + "modifiedAttackComplexity": { |
| 4206 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackComplexityType" |
| 4207 | + }, |
| 4208 | + "modifiedAttackRequirements": { |
| 4209 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackRequirementsType" |
| 4210 | + }, |
| 4211 | + "modifiedAttackVector": { |
| 4212 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedAttackVectorType" |
| 4213 | + }, |
| 4214 | + "modifiedPrivilegesRequired": { |
| 4215 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedPrivilegesRequiredType" |
| 4216 | + }, |
| 4217 | + "modifiedSubAvailabilityImpact": { |
| 4218 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType" |
| 4219 | + }, |
| 4220 | + "modifiedSubConfidentialityImpact": { |
| 4221 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubCType" |
| 4222 | + }, |
| 4223 | + "modifiedSubIntegrityImpact": { |
| 4224 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedSubIaType" |
| 4225 | + }, |
| 4226 | + "modifiedUserInteraction": { |
| 4227 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedUserInteractionType" |
| 4228 | + }, |
| 4229 | + "modifiedVulnAvailabilityImpact": { |
| 4230 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType" |
| 4231 | + }, |
| 4232 | + "modifiedVulnConfidentialityImpact": { |
| 4233 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType" |
| 4234 | + }, |
| 4235 | + "modifiedVulnIntegrityImpact": { |
| 4236 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/modifiedVulnCiaType" |
| 4237 | + }, |
| 4238 | + "privilegesRequired": { |
| 4239 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/privilegesRequiredType" |
| 4240 | + }, |
| 4241 | + "providerUrgency": { |
| 4242 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/providerUrgencyType" |
| 4243 | + }, |
| 4244 | + "subAvailabilityImpact": { |
| 4245 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType" |
| 4246 | + }, |
| 4247 | + "subConfidentialityImpact": { |
| 4248 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType" |
| 4249 | + }, |
| 4250 | + "subIntegrityImpact": { |
| 4251 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/subCiaType" |
| 4252 | + }, |
| 4253 | + "userInteraction": { |
| 4254 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/userInteractionType" |
| 4255 | + }, |
| 4256 | + "valueDensity": { |
| 4257 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/valueDensityType" |
| 4258 | + }, |
| 4259 | + "vectorString": { |
| 4260 | + "type": "string" |
| 4261 | + }, |
| 4262 | + "version": { |
| 4263 | + "description": "CVSS Version", |
| 4264 | + "enum": [ |
| 4265 | + "4.0" |
| 4266 | + ], |
| 4267 | + "type": "string" |
| 4268 | + }, |
| 4269 | + "vulnAvailabilityImpact": { |
| 4270 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType" |
| 4271 | + }, |
| 4272 | + "vulnConfidentialityImpact": { |
| 4273 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType" |
| 4274 | + }, |
| 4275 | + "vulnIntegrityImpact": { |
| 4276 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnCiaType" |
| 4277 | + }, |
| 4278 | + "vulnerabilityResponseEffort": { |
| 4279 | + "$ref": "#/definitions/metrics/items/properties/cvssV4_0/definitions/vulnerabilityResponseEffortType" |
| 4280 | + } |
| 4281 | + }, |
| 4282 | + "required": [ |
| 4283 | + "version", |
| 4284 | + "vectorString", |
| 4285 | + "baseScore", |
| 4286 | + "baseSeverity" |
| 4287 | + ], |
| 4288 | + "title": "JSON Schema for Common Vulnerability Scoring System version 4.0", |
| 4289 | + "type": "object" |
| 4290 | + }, |
4021 | 4291 | "cvssV3_1": {
|
4022 | 4292 | "$schema": "http://json-schema.org/draft-07/schema#",
|
4023 | 4293 | "type": "object",
|
|
0 commit comments