Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce CVSS data #128

Open
rxerium opened this issue Mar 18, 2024 · 2 comments
Open

Introduce CVSS data #128

rxerium opened this issue Mar 18, 2024 · 2 comments
Labels
Type: Enhancement Most issues will probably ask for additions or changes.

Comments

@rxerium
Copy link

rxerium commented Mar 18, 2024

Hey again,

I think it would be very useful if CVEMAP provided the following data:
image

Generally this would be helpful information. One of the use cases for me would be to filter vulnerabilities by user-interaction set to none as this would allow me to create a list of CVEs from which I can start creating templates for.

Many thanks,

Rishi

@rxerium rxerium added the Type: Enhancement Most issues will probably ask for additions or changes. label Mar 18, 2024
@ehsandeep
Copy link
Member

for 1) echo CVE-2023-43770 | cvemap -j it's already available in JSONL.
for 2) there is dedicated filter for it.

cvemap -h re
Navigate the CVE jungle with ease.

Usage:
  cvemap [flags]

Flags:
   -re, -remote  display remotely exploitable cves (AV:N & PR:N | PR:L) (default true)

@rxerium
Copy link
Author

rxerium commented Mar 18, 2024

thanks @ehsandeep!

  1. Currently its listed as:
    image

While yes, I could read this from CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N wouldn't it be easier to read if it were listed as shown on the NVD NIST page?

  1. I did see that but I feel UI:N would be useful too as the majority of vulns I'm looking at that require user interaction I can't create a template/script to detect if its vulnerable for them. Is this possible to filter for this within CVEMAP?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Enhancement Most issues will probably ask for additions or changes.
Projects
None yet
Development

No branches or pull requests

2 participants