Class VulnerabilityNote (2.4.0) 

public sealed class VulnerabilityNote : IMessage<VulnerabilityNote>, IEquatable<VulnerabilityNote>, IDeepCloneable<VulnerabilityNote>, IBufferMessage, IMessage

A security vulnerability that can be found in resources.

Inheritance

Object > VulnerabilityNote

Namespace

Grafeas.V1

Assembly

Grafeas.V1.dll

Constructors

VulnerabilityNote()

public VulnerabilityNote()

VulnerabilityNote(VulnerabilityNote)

public VulnerabilityNote(VulnerabilityNote other)
Parameter
Name Description
other VulnerabilityNote

Properties

CvssScore

public float CvssScore { get; set; }

The CVSS score of this vulnerability. CVSS score is on a scale of 0 - 10 where 0 indicates low severity and 10 indicates high severity.

Property Value
Type Description
Single

CvssV3

public CVSSv3 CvssV3 { get; set; }

The full description of the CVSSv3 for this vulnerability.

Property Value
Type Description
CVSSv3

Details

public RepeatedField<VulnerabilityNote.Types.Detail> Details { get; }

Details of all known distros and packages affected by this vulnerability.

Property Value
Type Description
RepeatedField<VulnerabilityNote.Types.Detail>

Severity

public Severity Severity { get; set; }

The note provider assigned severity of this vulnerability.

Property Value
Type Description
Severity

SourceUpdateTime

public Timestamp SourceUpdateTime { get; set; }

The time this information was last changed at the source. This is an upstream timestamp from the underlying information source - e.g. Ubuntu security tracker.

Property Value
Type Description
Timestamp

WindowsDetails

public RepeatedField<VulnerabilityNote.Types.WindowsDetail> WindowsDetails { get; }

Windows details get their own format because the information format and model don't match a normal detail. Specifically Windows updates are done as patches, thus Windows vulnerabilities really are a missing package, rather than a package being at an incorrect version.

Property Value
Type Description
RepeatedField<VulnerabilityNote.Types.WindowsDetail>