Options
All
  • Public
  • Public/Protected
  • All
Menu

Namespace Vulnerability

A vulnerability is a weakness or error in an artifact. A vulnerability is a generalization of a CVE (every CVE is a vulnerability, but not every vulnerability has a CVE).

Properties

Optional cvssV2Score

cvssV2Score: undefined | number

Common Vulnerability Scoring System (CVSS) Version 2. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

Optional cvssV3Score

cvssV3Score: undefined | number

Common Vulnerability Scoring System (CVSS) Version 3. Note: Numbers greater than Number.MAX_SAFE_INTEGER will result in rounding issues.

id

id: string

Unique vulnerability identifier, e.g. CVE-1999-0067.

Optional isFalsePositive

isFalsePositive: undefined | false | true

Indicates if the vulnerability is a false positive according to the usage data. If no usage data was provided or the service cannot infer usage of the vulnerable code then this property is {@code null}.

isIgnored

isIgnored: boolean

Indicates if the vulnerability was ignored according to the audit configuration.

Optional severity

severity: model.VulnerabilitySeverity

ADM qualitative severity score. Can be either NONE, LOW, MEDIUM, HIGH or CRITICAL.

Optional source

source: undefined | string

Source that published the vulnerability

Functions

getDeserializedJsonObj

getJsonObj