Class CycloneDXVulnerability

A security vulnerability affecting one or more components.

Hierarchy

  • CycloneDXVulnerability

Constructors

constructor

Properties

additionalProperties? advisories? affects analysis? cwes? description? detail? id ratings references?

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

Optional advisories

advisories?: CycloneDXVulnerabilityAdvisory[]

External advisory references for the vulnerability.

affects

affects: CycloneDXVulnerabilityAffects[]

The components affected by this vulnerability. Must be non-empty. Each ref must match a bom-ref in components.

Optional analysis

analysis?: CycloneDXVulnerabilityAnalysis

The exploitability analysis for the vulnerability. When state is set to resolved or resolved_with_pedigree, the vulnerability is closed in Datadog. Other state values are accepted but have no effect on the vulnerability status.

Optional cwes

cwes?: number[]

CWE identifiers associated with the vulnerability.

Optional description

description?: string

A short description of the vulnerability.

Optional detail

detail?: string

Detailed information about the vulnerability.

id

id: string

The vulnerability identifier (for example, a CVE ID).

ratings

ratings: CycloneDXVulnerabilityRating[]

The severity ratings for the vulnerability. Must contain exactly one element.

Optional references

references?: CycloneDXVulnerabilityReference[]

External reference identifiers for the vulnerability.

Settings

Member Visibility

Theme

Generated using TypeDoc