cweMetadata

Response Center-owned CWE resolution for one CVE indicator. The tuple is written whole: a resolved record carries the effective weakness data, and an absent record states that every required source was checked and none holds usable CWE data.

Examples

type CweMetadata {
  status: CweMetadataStatus!
  cwes: [String!]!
  provenance: [CweProvenanceEntry!]!
  vulnerabilityClass: CveVulnerabilityClass
  vulnerabilityClassSource: CweSource
  mappingVersion: String!
  resolvedAt: DateTime!
}

Fields

Field	Description	Supported fields
status CweMetadataStatus!	Whether the record carries resolved CWE data or an authoritative absence.
cwes [String!]!	Canonical CWE identifiers from the highest-priority source with usable CWE data.
provenance [CweProvenanceEntry!]!	Per-source CWE identifiers retained from every source that returned usable data.	source CweSource! cwes [String!]!
vulnerabilityClass CveVulnerabilityClass	The vulnerability class the effective CWE identifiers map to unambiguously.
vulnerabilityClassSource CweSource	The advisory source whose CWE identifiers produced the vulnerability class.
mappingVersion String!	The version of the CWE-to-class mapping used for the derivation, kept for safe remapping.
resolvedAt DateTime!	The time the resolution that produced the record completed.

References

Fields with this object:

• {} Indicator.cweMetadata