Skip to content

2002 - Vulnerability Finding

OCSF Reference

CIM Data Models: Vulnerabilities

OCSF Version: 1.1.0

CIM Field Mapping
signature finding_info.title
signature_id finding_info.uid
cve vulnerabilities{}.cve.uid
cvss vulnerabilities{}.cve.cvss{}.overall_score
severity case(severity_id==0, "unknown", severity_id==1, "informational", severity_id==2, "low", severity_id==3, "medium", severity_id==4, "high", severity_id==5, "critical", severity_id==6, "fatal",true(), "other")
vendor_product finding_info.product_uid

OCSF Version: 1.2.0

CIM Field Mapping
signature finding_info.title
signature_id finding_info.uid
cve vulnerabilities{}.cve.uid
cvss vulnerabilities{}.cve.cvss{}.overall_score
severity case(severity_id==0, "unknown", severity_id==1, "informational", severity_id==2, "low", severity_id==3, "medium", severity_id==4, "high", severity_id==5, "critical", severity_id==6, "fatal",true(), "other")
vendor_product finding_info.product_uid