Showing:

Annotations
Attributes
Diagrams
Facets
Source
Used by
Imported schema common.xsd
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
This is the XML schema for the Common Vulerability Reporting Framework's common data types.
Complex Type cvrf-common:localizedNormalizedString
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
Normalized string type with an optional language attribute.  The default language is English.  This string cannot be empty.
Diagram
Diagram common_xsd.tmp#nonEmptyNormalizedString xml_xsd.tmp#lang
Type extension of cvrf-common:nonEmptyNormalizedString
Type hierarchy
Used by
Attributes
QName Type Default Use Annotation
xml:lang union of(xs:language, restriction of xs:string) en optional
<div>
  <h3>lang (as an attribute name)</h3>
  <p>denotes an attribute whose value is a language code for the natural language of the content of any element; its value is inherited. This name is reserved by virtue of its definition in the XML specification.</p>
</div>
<div>
  <h4>Notes</h4>
  <p>Attempting to install the relevant ISO 2- and 3-letter codes as the enumerated possible values is probably never going to be a realistic possibility.</p>
  <p>See BCP 47 at
    <a href="http://www.rfc-editor.org/rfc/bcp/bcp47.txt">http://www.rfc-editor.org/rfc/bcp/bcp47.txt</a>and the IANA language subtag registry at
    <a href="http://www.iana.org/assignments/language-subtag-registry">http://www.iana.org/assignments/language-subtag-registry</a>for further information.</p>
  <p>The union allows for the 'un-declaration' of xml:lang with the empty string.</p>
</div>
Source
<xs:complexType name="localizedNormalizedString">
  <xs:annotation>
    <xs:documentation xml:lang="en">Normalized string type with an optional language attribute. The default language is English. This string cannot be empty.</xs:documentation>
  </xs:annotation>
  <xs:simpleContent>
    <xs:extension base="cvrf-common:nonEmptyNormalizedString">
      <xs:attribute ref="xml:lang" default="en">
        <xs:annotation>
          <xs:documentation xml:lang="en">Locale code used for the string value. The default is "en".</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:extension>
  </xs:simpleContent>
</xs:complexType>
Simple Type cvrf-common:nonEmptyNormalizedString
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
A normalized string type that cannot be empty.
Diagram
Diagram
Type restriction of xs:normalizedString
Facets
minLength 1
Used by
Source
<xs:simpleType name="nonEmptyNormalizedString">
  <xs:annotation>
    <xs:documentation xml:lang="en">A normalized string type that cannot be empty.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:normalizedString">
    <xs:minLength value="1"/>
  </xs:restriction>
</xs:simpleType>
Complex Type cvrf-common:localizedString
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
String type with an optional language attribute.  The default language is English.
Diagram
Diagram common_xsd.tmp#nonEmptyString xml_xsd.tmp#lang
Type extension of cvrf-common:nonEmptyString
Type hierarchy
Used by
Elements cvrf:cvrfdoc/cvrf:Acknowledgments/cvrf:Acknowledgment/cvrf:Description, cvrf:cvrfdoc/cvrf:Acknowledgments/cvrf:Acknowledgment/cvrf:Name, cvrf:cvrfdoc/cvrf:Acknowledgments/cvrf:Acknowledgment/cvrf:Organization, cvrf:cvrfdoc/cvrf:AggregateSeverity, cvrf:cvrfdoc/cvrf:DocumentDistribution, cvrf:cvrfdoc/cvrf:DocumentNotes/cvrf:Note, cvrf:cvrfdoc/cvrf:DocumentPublisher/cvrf:ContactDetails, cvrf:cvrfdoc/cvrf:DocumentPublisher/cvrf:IssuingAuthority, cvrf:cvrfdoc/cvrf:DocumentReferences/cvrf:Reference/cvrf:Description, cvrf:cvrfdoc/cvrf:DocumentTracking/cvrf:Generator/cvrf:Engine, cvrf:cvrfdoc/cvrf:DocumentTracking/cvrf:Identification/cvrf:Alias, cvrf:cvrfdoc/cvrf:DocumentTracking/cvrf:Identification/cvrf:ID, cvrf:cvrfdoc/cvrf:DocumentTracking/cvrf:RevisionHistory/cvrf:Revision/cvrf:Description, prod:ProductTree/prod:ProductGroups/prod:Group/prod:Description, vuln:Vulnerability/vuln:Acknowledgments/vuln:Acknowledgment/vuln:Description, vuln:Vulnerability/vuln:Acknowledgments/vuln:Acknowledgment/vuln:Name, vuln:Vulnerability/vuln:Acknowledgments/vuln:Acknowledgment/vuln:Organization, vuln:Vulnerability/vuln:CWE, vuln:Vulnerability/vuln:Involvements/vuln:Involvement/vuln:Description, vuln:Vulnerability/vuln:Notes/vuln:Note, vuln:Vulnerability/vuln:References/vuln:Reference/vuln:Description, vuln:Vulnerability/vuln:Remediations/vuln:Remediation/vuln:Description, vuln:Vulnerability/vuln:Remediations/vuln:Remediation/vuln:Entitlement, vuln:Vulnerability/vuln:Threats/vuln:Threat/vuln:Description, vuln:Vulnerability/vuln:Title
Attributes
QName Type Default Use Annotation
xml:lang union of(xs:language, restriction of xs:string) en optional
<div>
  <h3>lang (as an attribute name)</h3>
  <p>denotes an attribute whose value is a language code for the natural language of the content of any element; its value is inherited. This name is reserved by virtue of its definition in the XML specification.</p>
</div>
<div>
  <h4>Notes</h4>
  <p>Attempting to install the relevant ISO 2- and 3-letter codes as the enumerated possible values is probably never going to be a realistic possibility.</p>
  <p>See BCP 47 at
    <a href="http://www.rfc-editor.org/rfc/bcp/bcp47.txt">http://www.rfc-editor.org/rfc/bcp/bcp47.txt</a>and the IANA language subtag registry at
    <a href="http://www.iana.org/assignments/language-subtag-registry">http://www.iana.org/assignments/language-subtag-registry</a>for further information.</p>
  <p>The union allows for the 'un-declaration' of xml:lang with the empty string.</p>
</div>
Source
<xs:complexType name="localizedString">
  <xs:annotation>
    <xs:documentation xml:lang="en">String type with an optional language attribute. The default language is English.</xs:documentation>
  </xs:annotation>
  <xs:simpleContent>
    <xs:extension base="cvrf-common:nonEmptyString">
      <xs:attribute ref="xml:lang" default="en">
        <xs:annotation>
          <xs:documentation xml:lang="en">Locale code used for the string value. The default is "en".</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:extension>
  </xs:simpleContent>
</xs:complexType>
Simple Type cvrf-common:nonEmptyString
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
A string type that cannot be empty.
Diagram
Diagram
Type restriction of xs:string
Facets
minLength 1
Used by
Source
<xs:simpleType name="nonEmptyString">
  <xs:annotation>
    <xs:documentation xml:lang="en">A string type that cannot be empty.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:string">
    <xs:minLength value="1"/>
  </xs:restriction>
</xs:simpleType>
Simple Type cvrf-common:PublisherEnumType
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
Types enumerating the various publishers of a document.
Diagram
Diagram
Type restriction of xs:token
Facets
enumeration Vendor
Developers or maintainers of information system products or services.
enumeration Discoverer
Individuals or organizations that find vulnerabilities or security weaknesses.
enumeration Coordinator
Individuals or organizations that manage a single vendor's response or multiple vendors' responses to a vulnerability, a security flaw, or an incident.
enumeration User
Everyone using a vendor's product.
enumeration Other
Catchall for everyone else. Currently this includes forwarders, re-publishers, language translators and miscellaneous contributors.
Used by
Source
<xs:simpleType name="PublisherEnumType">
  <xs:annotation>
    <xs:documentation xml:lang="en">Types enumerating the various publishers of a document.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:token">
    <xs:enumeration value="Vendor">
      <xs:annotation>
        <xs:documentation xml:lang="en">Developers or maintainers of information system products or services.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Discoverer">
      <xs:annotation>
        <xs:documentation xml:lang="en">Individuals or organizations that find vulnerabilities or security weaknesses.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Coordinator">
      <xs:annotation>
        <xs:documentation xml:lang="en">Individuals or organizations that manage a single vendor's response or multiple vendors' responses to a vulnerability, a security flaw, or an incident.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="User">
      <xs:annotation>
        <xs:documentation xml:lang="en">Everyone using a vendor's product.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Other">
      <xs:annotation>
        <xs:documentation xml:lang="en">Catchall for everyone else. Currently this includes forwarders, re-publishers, language translators and miscellaneous contributors.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
  </xs:restriction>
</xs:simpleType>
Simple Type cvrf-common:revisionNumber
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
Dotted string representing the document revision
Diagram
Diagram
Type restriction of xs:token
Facets
pattern (0|[1-9][0-9]*)(\.(0|[1-9][0-9]*)){0,3}
Used by
Source
<xs:simpleType name="revisionNumber">
  <xs:annotation>
    <xs:documentation xml:lang="en">Dotted string representing the document revision</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:token">
    <xs:pattern value="(0|[1-9][0-9]*)(\.(0|[1-9][0-9]*)){0,3}"/>
  </xs:restriction>
</xs:simpleType>
Simple Type cvrf-common:NoteTypeEnumType
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
Allowed type values for CVRF notes.
Diagram
Diagram
Type restriction of xs:token
Facets
enumeration General
A general, high-level note (Title may have more information).
enumeration Details
A low-level detailed discussion (Title may have more information).
enumeration Description
A description of something (Title may have more information).
enumeration Summary
A summary of something (Title may have more information).
enumeration FAQ
A list of frequently asked questions.
enumeration Legal Disclaimer
Any possible legal discussion, including constraints, surrounding the document.
enumeration Other
Something that doesn’t fit (Title should have more information).
Used by
Source
<xs:simpleType name="NoteTypeEnumType">
  <xs:annotation>
    <xs:documentation xml:lang="en">Allowed type values for CVRF notes.</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:token">
    <xs:enumeration value="General">
      <xs:annotation>
        <xs:documentation xml:lang="en">A general, high-level note (Title may have more information).</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Details">
      <xs:annotation>
        <xs:documentation xml:lang="en">A low-level detailed discussion (Title may have more information).</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Description">
      <xs:annotation>
        <xs:documentation xml:lang="en">A description of something (Title may have more information).</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Summary">
      <xs:annotation>
        <xs:documentation xml:lang="en">A summary of something (Title may have more information).</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="FAQ">
      <xs:annotation>
        <xs:documentation xml:lang="en">A list of frequently asked questions.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Legal Disclaimer">
      <xs:annotation>
        <xs:documentation xml:lang="en">Any possible legal discussion, including constraints, surrounding the document.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Other">
      <xs:annotation>
        <xs:documentation xml:lang="en">Something that doesn’t fit (Title should have more information).</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
  </xs:restriction>
</xs:simpleType>
Simple Type cvrf-common:ReferenceTypeEnum
Namespace http://www.icasi.org/CVRF/schema/common/1.1
Annotations
Types enumerating the type of reference document
Diagram
Diagram
Type restriction of xs:token
Facets
enumeration External
This document is an external reference to the current vulnerability.
enumeration Self
This document is a reference to this same vulnerability.
Used by
Source
<xs:simpleType name="ReferenceTypeEnum">
  <xs:annotation>
    <xs:documentation xml:lang="en">Types enumerating the type of reference document</xs:documentation>
  </xs:annotation>
  <xs:restriction base="xs:token">
    <xs:enumeration value="External">
      <xs:annotation>
        <xs:documentation xml:lang="en">This document is an external reference to the current vulnerability.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
    <xs:enumeration value="Self">
      <xs:annotation>
        <xs:documentation xml:lang="en">This document is a reference to this same vulnerability.</xs:documentation>
      </xs:annotation>
    </xs:enumeration>
  </xs:restriction>
</xs:simpleType>