CVE Enrichment - Generic v2

This playbook performs CVE Enrichment using the following integrations: - VulnDB - CVE Search - IBM X-Force Exchange

Common Playbooks · 13 tasks · 1 input · 17 outputs

Inputs

  • cve_id — The CVE ID to enrich.

Outputs

  • CVE — The CVE object
  • CVE.ID — The ID of the CVE
  • CVE.CVSS — The CVSS score of the CVE
  • CVE.Published — The date this was published
  • CVE.Modified — When CVE was last modified
  • CVE.Description — The CVE description
  • VulnDB.Vulnerability.ID — Vulnerability ID.
  • VulnDB.Vulnerability.Title — Vulnerability title (human readable).
  • VulnDB.Vulnerability.Description — Vulnerability description (human readable).
  • VulnDB.Vulnerability.Solution — Vulnerability solution (human readable).
  • VulnDB.CvssMetrics.Id — CVSS reference value.
  • VulnDB.CvssMetrics.ConfidentialityImpact — CVSS confidentiality impact.
  • VulnDB.CvssMetrics.AvailabilityImpact — CVSS availability impact.
  • VulnDB.CvssMetrics.Score — CVSS score.
  • VulnDB.cvssMetrics.integrity_impact — CVSS integrity impact.
  • VulnDB.Vendors.Id — Vendor ID.
  • VulnDB.Products.Id — Product IDs.

Commands used

cve cve-search vulndb-get-vuln-by-cve-id

Flowchart

yes yes yes yes Start Start Is there a CVE to enrich? Is there a CVE to enrich? Done Done Is IBM X-Force Exchange integration enabled? Is IBM X-Force Exchange i... Is "CVE Search" integration enabled? Is "CVE Search" integrati... Get CVE info from "CVE Search" - cve Get CVE info from "CVE Se... cve Get CVE information from XFE - cve-search Get CVE information from XFE cve-search CVE enrichment CVE enrichment VulnDB - Get vulnerability details by CVE - vulndb-get-vuln-by-cve-id VulnDB - Get vulnerabilit... vulndb-get-vuln-by-cve-id VulnDB VulnDB CVE Search CVE Search IBM X-Force Exchange IBM X-Force Exchange Is VulnDB integration enabled? Is VulnDB integration ena...