could anyone please let me know how to obtain a vulnerability only (CVE) list output

Su Zhang westlifezs at gmail.com
Thu Nov 5 23:45:08 UTC 2015


Hello everyone,

I am new to scap project. I played with OVAL long time ago. I remember OVAL
was able to output a list of CVEs with true or false status indicating if
there is a vulnerability or not within the target system. However, while I
am playing with scap, I can not see such list in the report.html. Instead,
I can only see succeed or failed tests against certain properties. And only
vectors like CCE, CWE are mentioned in the outcome report. Is there any
option I can use to create a CVE only report?

Thanks a lot!

-- 
Su Zhang
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20151105/7198edbe/attachment.html>


More information about the scap-security-guide mailing list