Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
<xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base severity score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element>
<xsd:element minOccurs="0" name="exploit-subscore" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base exploit sub-score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element>
<xsd:element minOccurs="0" name="impact-subscore" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base impact sub-score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element>
Data source the vector was obtained from. Example: http://nvd.nist.gov or com.symantec.deepsight
Diagram
Type
xsd:anyURI
Source
<xsd:element name="source" type="xsd:anyURI"><xsd:annotation><xsd:documentation>Data source the vector was obtained from. Example: http://nvd.nist.gov or com.symantec.deepsight</xsd:documentation></xsd:annotation></xsd:element>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Data source the vector was obtained from. Example: gov.nist.nvd or com.symantec.deepsight
Diagram
Type
xsd:anyURI
Source
<xsd:element name="source" type="xsd:anyURI"><xsd:annotation><xsd:documentation>Data source the vector was obtained from. Example: gov.nist.nvd or com.symantec.deepsight</xsd:documentation></xsd:annotation></xsd:element>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
<xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>The temporal score is the temporal multiplier times the base score.</xsd:documentation></xsd:annotation></xsd:element>
The temporal multiplier is a number between zero and one. Reference the CVSS standard for computation.
Diagram
Type
xsd:decimal
Source
<xsd:element minOccurs="0" name="temporal-multiplier" type="xsd:decimal"><xsd:annotation><xsd:documentation>The temporal multiplier is a number between zero and one. Reference the CVSS standard for computation.</xsd:documentation></xsd:annotation></xsd:element>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
<xsd:simpleType name="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Value restriction to single decimal values from 0.0 to 10.0, as used in CVSS scores</xsd:documentation></xsd:annotation><xsd:restriction base="xsd:decimal"><xsd:minInclusive value="0"/><xsd:maxInclusive value="10"/><xsd:fractionDigits value="1"/></xsd:restriction></xsd:simpleType>
"This schema was intentionally designed to avoid mixing classes and attributes between CVSS version 1, CVSS version 2, and future versions. Scores in the CVSS system are interdependent. The temporal score is a multiplier of the base score. The environmental score, in turn, is a multiplier of the temporal score. The ability to transfer these scores independently is provided on the assumption that the user understands the business logic. For any given metric, it is preferred that the score, as a minimum is provided, however the score can be re-created from the metrics or the multiplier and any scores they are dependent on."
<xsd:complexType name="cvssType"><xsd:annotation><xsd:documentation>"This schema was intentionally designed to avoid mixing classes and attributes between CVSS version 1, CVSS version 2, and future versions. Scores in the CVSS system are interdependent. The temporal score is a multiplier of the base score. The environmental score, in turn, is a multiplier of the temporal score. The ability to transfer these scores independently is provided on the assumption that the user understands the business logic. For any given metric, it is preferred that the score, as a minimum is provided, however the score can be re-created from the metrics or the multiplier and any scores they are dependent on."</xsd:documentation></xsd:annotation><xsd:sequence><xsd:element minOccurs="0" maxOccurs="unbounded" name="base_metrics" type="baseMetricsType"/><xsd:element minOccurs="0" maxOccurs="unbounded" name="environmental_metrics" type="environmentalMetricsType"/><xsd:element minOccurs="0" maxOccurs="unbounded" name="temporal_metrics" type="temporalMetricsType"/></xsd:sequence></xsd:complexType>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Source
<xsd:complexType name="baseMetricsType"><xsd:complexContent><xsd:extension base="metricsType"><xsd:sequence><xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base severity score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element><xsd:element minOccurs="0" name="exploit-subscore" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base exploit sub-score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element><xsd:element minOccurs="0" name="impact-subscore" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>Base impact sub-score assigned to a vulnerability by a source</xsd:documentation></xsd:annotation></xsd:element><xsd:group ref="baseVectorsGroup"/><xsd:element name="source" type="xsd:anyURI"><xsd:annotation><xsd:documentation>Data source the vector was obtained from. Example: http://nvd.nist.gov or com.symantec.deepsight</xsd:documentation></xsd:annotation></xsd:element><xsd:element minOccurs="0" name="generated-on-datetime" type="xsd:dateTime"/></xsd:sequence></xsd:extension></xsd:complexContent></xsd:complexType>
Complex Type metricsType
Namespace
http://scap.nist.gov/schema/cvss-v2/1.0
Annotations
Base type for metrics that defines common attributes of all metrics.
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Source
<xsd:complexType name="metricsType" abstract="true"><xsd:annotation><xsd:documentation>Base type for metrics that defines common attributes of all metrics.</xsd:documentation></xsd:annotation><xsd:attribute name="upgraded-from-version" type="xsd:decimal"><xsd:annotation><xsd:documentation>Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.</xsd:documentation></xsd:annotation></xsd:attribute></xsd:complexType>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Source
<xsd:complexType name="environmentalMetricsType"><xsd:complexContent><xsd:extension base="metricsType"><xsd:sequence><xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"/><xsd:group ref="environmentalVectorsGroup"/><xsd:element name="source" type="xsd:anyURI"><xsd:annotation><xsd:documentation>Data source the vector was obtained from. Example: gov.nist.nvd or com.symantec.deepsight</xsd:documentation></xsd:annotation></xsd:element><xsd:element minOccurs="0" name="generated-on-datetime" type="xsd:dateTime"/></xsd:sequence></xsd:extension></xsd:complexContent></xsd:complexType>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
Source
<xsd:complexType name="temporalMetricsType"><xsd:complexContent><xsd:extension base="metricsType"><xsd:sequence><xsd:element minOccurs="0" name="score" type="zeroToTenDecimalType"><xsd:annotation><xsd:documentation>The temporal score is the temporal multiplier times the base score.</xsd:documentation></xsd:annotation></xsd:element><xsd:element minOccurs="0" name="temporal-multiplier" type="xsd:decimal"><xsd:annotation><xsd:documentation>The temporal multiplier is a number between zero and one. Reference the CVSS standard for computation.</xsd:documentation></xsd:annotation></xsd:element><xsd:group ref="temporalVectorsGroup"/><xsd:element name="source" type="xsd:anyURI"/><xsd:element name="generated-on-datetime" type="xsd:dateTime"/></xsd:sequence></xsd:extension></xsd:complexContent></xsd:complexType>
<xsd:attribute name="approximated" type="xsd:boolean" default="false"><xsd:annotation><xsd:documentation>Indicates if the vector has been approximated as the result of an upgrade from a previous CVSS version</xsd:documentation></xsd:annotation></xsd:attribute>
Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.
<xsd:attribute name="upgraded-from-version" type="xsd:decimal"><xsd:annotation><xsd:documentation>Indicates if the metrics have been upgraded from a previous version of CVSS. If fields that were approximated will have an approximated attribute set to 'true'.</xsd:documentation></xsd:annotation></xsd:attribute>
Indicates if the vector has been approximated as the result of an upgrade from a previous CVSS version
Source
<xsd:attributeGroup name="vectorAttributeGroup"><xsd:attribute name="approximated" type="xsd:boolean" default="false"><xsd:annotation><xsd:documentation>Indicates if the vector has been approximated as the result of an upgrade from a previous CVSS version</xsd:documentation></xsd:annotation></xsd:attribute></xsd:attributeGroup>