https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship
Provides a CVSS version 3 assessment for a vulnerability.
Focus nodes of this shape (security:CvssV3VulnAssessmentRelationship) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
| security:score | Provides a numerical (0-10) representation of the severity of a vulnerability. | 1 | 1 | xsd:decimal sh:Literal |
|
| security:severity | Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. | 1 | 1 | security:CvssSeverityType sh:IRI |
sh:in
security:CvssSeverityType/critical, security:CvssSeverityType/high, security:CvssSeverityType/medium, security:CvssSeverityType/low, security:CvssSeverityType/none
|
| security:vectorString | Specifies the CVSS vector string for a vulnerability. | 1 | 1 | xsd:string sh:Literal |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix security: <https://spdx.org/rdf/3.0.1/terms/Security/> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
security:CvssV3VulnAssessmentRelationship a owl:Class,
sh:NodeShape ;
rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ;
rdfs:subClassOf security:VulnAssessmentRelationship ;
sh:nodeKind sh:IRI ;
sh:property [ sh:class security:CvssSeverityType ;
sh:in ( <https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical> <https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high> <https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium> <https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low> <https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none> ) ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:IRI ;
sh:path security:severity ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:vectorString ],
[ sh:datatype xsd:decimal ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:score ] .