org.owasp.dependencycheck.data.update.nvd

Class NvdCveParser

java.lang.Object

org.owasp.dependencycheck.data.update.nvd.NvdCveParser

public final class NvdCveParser
extends Object

Parser and processor of NVD CVE JSON data feeds.

Author:

Jeremy Long

Constructor Summary

Constructors

Constructor and Description
NvdCveParser(Settings settings, CveDB db) Creates a new NVD CVE JSON Parser.

Method Summary

Modifier and Type	Method and Description
void	parse(File file) Parses the NVD JSON file and inserts/updates data into the database.
protected boolean	testCveCpeStartWithFilter(DefCveItem cve) Tests the CVE's CPE entries against the starts with filter.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NvdCveParser

public NvdCveParser(Settings settings,
                    CveDB db)

Creates a new NVD CVE JSON Parser.

Parameters:

settings - the dependency-check settings

db - a reference to the database

Method Detail

parse

public void parse(File file)
           throws UpdateException

Parses the NVD JSON file and inserts/updates data into the database.

Parameters:

file - the NVD JSON file to parse

Throws:

UpdateException - thrown if the file could not be read

testCveCpeStartWithFilter

protected boolean testCveCpeStartWithFilter(DefCveItem cve)

Tests the CVE's CPE entries against the starts with filter. In general this limits the CVEs imported to just application level vulnerabilities.

Parameters:

cve - the CVE entry to examine

Returns:

true if the CVE affects CPEs identified by the configured CPE Starts with filter