https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship
Provides an exploit assessment of a vulnerability.
Focus nodes of this shape (security:ExploitCatalogVulnAssessmentRelationship) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
| security:catalogType | Specifies the exploit catalog type. | 1 | 1 | security:ExploitCatalogType sh:IRI |
sh:in
security:ExploitCatalogType/kev, security:ExploitCatalogType/other
|
| security:exploited | Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. | 1 | 1 | xsd:boolean sh:Literal |
|
| security:locator | Provides the location of an exploit catalog. | 1 | 1 | xsd:anyURI sh:Literal |
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix security: <https://spdx.org/rdf/3.0.1/terms/Security/> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
security:ExploitCatalogVulnAssessmentRelationship a owl:Class,
sh:NodeShape ;
rdfs:comment "Provides an exploit assessment of a vulnerability."@en ;
rdfs:subClassOf security:VulnAssessmentRelationship ;
sh:nodeKind sh:IRI ;
sh:property [ sh:datatype xsd:boolean ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:exploited ],
[ sh:datatype xsd:anyURI ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:Literal ;
sh:path security:locator ],
[ sh:class security:ExploitCatalogType ;
sh:in ( <https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev> <https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other> ) ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:IRI ;
sh:path security:catalogType ] .