| Package | Description |
|---|---|
| org.owasp.dependencycheck.data.nvdcve |
Contains classes used to work with the NVD CVE data.
|
| org.owasp.dependencycheck.dependency |
Contains the core Dependency implementation.
|
| Modifier and Type | Method and Description |
|---|---|
protected VulnerableSoftware |
CveDB.getMatchingSoftware(us.springett.parsers.cpe.Cpe cpe,
Set<VulnerableSoftware> vulnerableSoftware)
Determines if the given identifiedVersion is affected by the given cpeId
and previous version flag.
|
| Modifier and Type | Method and Description |
|---|---|
String |
CveItemOperator.extractEcosystem(String baseEcosystem,
VulnerableSoftware parsedCpe)
Attempts to determine the ecosystem based on the vendor, product and
targetSw.
|
| Modifier and Type | Method and Description |
|---|---|
protected VulnerableSoftware |
CveDB.getMatchingSoftware(us.springett.parsers.cpe.Cpe cpe,
Set<VulnerableSoftware> vulnerableSoftware)
Determines if the given identifiedVersion is affected by the given cpeId
and previous version flag.
|
| Modifier and Type | Method and Description |
|---|---|
VulnerableSoftware |
VulnerableSoftwareBuilder.build()
Builds the CPE Object.
|
VulnerableSoftware |
Vulnerability.getMatchedVulnerableSoftware()
Get the value of matchedVulnerableSoftware.
|
| Modifier and Type | Method and Description |
|---|---|
Set<VulnerableSoftware> |
Vulnerability.getVulnerableSoftware()
Get the value of vulnerableSoftware.
|
List<VulnerableSoftware> |
Vulnerability.getVulnerableSoftware(boolean sorted)
Returns a sorted list of vulnerable software.
|
| Modifier and Type | Method and Description |
|---|---|
void |
Vulnerability.addVulnerableSoftware(VulnerableSoftware software)
Adds an entry for vulnerable software.
|
protected static boolean |
VulnerableSoftware.compareVersions(VulnerableSoftware vs,
String targetVersion)
Evaluates the target against the version and version range checks:
versionEndExcluding, versionStartExcluding versionEndIncluding, and
versionStartIncluding.
|
void |
Vulnerability.setMatchedVulnerableSoftware(VulnerableSoftware software)
Sets the CPE that caused this vulnerability to be flagged.
|
| Modifier and Type | Method and Description |
|---|---|
void |
Vulnerability.setVulnerableSoftware(Set<VulnerableSoftware> vulnerableSoftware)
Set the value of vulnerableSoftware.
|
Copyright © 2012–2020 OWASP. All rights reserved.